domain local groups

hey guys I know the difference between global and universal group..but a little bit confusd abt this domain local groups...if anybody is having any idea ..do tell me guys...
thanx
pannu

Find more posts tagged with

Comments

Slowhand

Domain local groups are just a little bit more restricted to one area, so to speak, than global or universal groups. They're usually used to give permissions to local resources, such as printers or a fileshare, within a given domain. Where universal and global groups have the ability to transcend domains within the same forest, domain local groups do not. Basically, a domain local group only has permissions on the local domain.

Without any further rambling, here's a better explanation: http://technet2.microsoft.com/WindowsServer/en/library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx?mfr=true

sprkymrk

Actually, a domain local group can contain user accounts, global groups and universal groups from any domain. They can also contain other DL groups from the same domain. However, I think the point that slowhand meant to make was that domain local groups are used to assign permissions within the local domain only. In other words, I can't use domainA's domain local group to assign permissions to domainB's files or printers.

http://www.techexams.net/technotes/70290/man_groups.shtml

Hmm, just reread slowhand's post and it seems to be correct. Did you edit while I was typing or did I read it wrong the first time?

Slowhand

Nah, I just ramble. It only seems like gibberish because it is.

sprkymrk

I had to ask because I type soooo slooooow.
Except in the case of repeating oooooooooo's.

Slowhand

Not a problem. Type fast, type slow. I can't read, anyway.

sprkymrk

Slowhand wrote:

Not a problem. Type fast, type slow. I can't read, anyway.