The concept of domain group

Group types in the domain

1. Security group: mainly used to set permissions. It can also be used for tasks that have nothing to do with security, such as sending E-mail to a security group through E-mail software.

2. Communication groups: used in tasks that have nothing to do with security. For example, send E-mail to a communication group through E-mail software (the application must support AD before you can use the communication group). Unable to set permissions for distributed groups.

Security groups and communication groups can be converted to each other

The range of groups within the domain

According to the scope of the group, domain groups can be divided into the following three categories: local domain groups, global groups, and general groups.

1. Local domain group

1) member scope: users in all domains, global groups, general groups, and local domain groups in their respective domains

2) accessible resource scope: only the resources of the domain to which you belong can be accessed.

2. Overall group:

1) membership scope: can only contain users and global groups within the domain to which they belong

2) accessible resource scope: resources of all domains can be accessed.

3. General Group

1) membership scope: users in all domains, global groups, common groups

2) accessible resource scope: resources of all domains can be accessed.

Note: 1) generic groups are not supported when the domain functional level is win2000 mixed mode.

   2) Global group nesting is not supported when the domain functional level is win2000 mixed mode.