domain local groups

hey guys I know the difference between global and universal group..but a little bit confusd abt this domain local groups...if anybody is having any idea ..do tell me guys...
thanx
pannu

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Slowhand

Domain local groups are just a little bit more restricted to one area, so to speak, than global or universal groups. They're usually used to give permissions to local resources, such as printers or a fileshare, within a given domain. Where universal and global groups have the ability to transcend domains within the same forest, domain local groups do not. Basically, a domain local group only has permissions on the local domain.

Without any further rambling, here's a better explanation: http://technet2.microsoft.com/WindowsServer/en/library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx?mfr=true

sprkymrk

Actually, a domain local group can contain user accounts, global groups and universal groups from any domain. They can also contain other DL groups from the same domain. However, I think the point that slowhand meant to make was that domain local groups are used to assign permissions within the local domain only. In other words, I can't use domainA's domain local group to assign permissions to domainB's files or printers.

http://www.techexams.net/technotes/70290/man_groups.shtml

Hmm, just reread slowhand's post and it seems to be correct. Did you edit while I was typing or did I read it wrong the first time?

Slowhand

Nah, I just ramble. It only seems like gibberish because it is.

sprkymrk

I had to ask because I type soooo slooooow.
Except in the case of repeating oooooooooo's.

Slowhand

Not a problem. Type fast, type slow. I can't read, anyway.

sprkymrk

Slowhand wrote:

Not a problem. Type fast, type slow. I can't read, anyway.