Domain users and workgroups
Authorization rules for workgroup users:
AGDLP rules:
A: domain user account
G: the global group is used to organize accounts. The members come from this domain and are used for the whole forest.
DL: the domain local group is used for authorization. The members come from the whole forest and are used for the local domain.
P: permission
Communication group: for mailing list distribution, cannot be used for authorization, and there is no SID number
New global group and domain local group
Add domain users to the local group:
Join a local group to a domain local group:
