Exam Highlights
Before taking the exam, review the key points and terms that are presented in this chapter. You need to know this information.
Key Points
Global security groups are most often used to organize users who share similar network access requirements. Domain local security groups are most often used to assign permissions to resources. Universal security groups are most often used to assign permissions to related resources in multiple domains.
You should place user accounts into global groups, create a domain local group for a group of resources to be shared in common, place the global groups into the domain local group, and then assign permissions to the domain local group.
For global security groups, members come from only the local domain, but they can access resources in any domain.
For domain local security groups, members can come from any domain, but they can access resources only in the local domain.
For universal security groups, members can come from any domain in the forest and they can access resources in any domain in the forest.
