Domain Local Group Best Practice
The reason being that you can add domain global and domain universal groups from any domain to a domain local group.
Domain local group best practice. Use domain local groups to grant access to resources such as you file systems. A local group cannot be a member of any other group. However for most enterprises which are spanned across multiple locations and regions across the world a more practical approach is a single forest multi domain model. Group policy can get complicated it can be complex and it can be difficult to troubleshoot when you have multiple gpos applied across the entire domain.
The group you create for that purpose should be a domain local group ex. The managers and directors across various departments who own the content within a certain group can be empowered to manage who has access to the group. You could for example create. Local group usage best practice.
This will also maximise performance in a multi domain forest. The global group will have the same level of access to the resource that the domain local group has. This is the most thorough guide to group policy best practices on the web. Best practice place users in global groups nest those inside domain local groups which in turn are used to apply permissions as shown below.
Forest and domain layout the most simple approach is a single forest single domain design. In a workgroup you can use local groups to manage security of resources on a system. It professionals don t need to be the ones in charge of group management. But here s the kicker.
Group policy design best practices group policy is a series of settings in the windows registry that control security auditing and other operational behaviors. In a single forest multi domain model typically the root domain should act as the resource domain. In a domain however. Universal groups in active directory are useful in multi domain forests.
Domain local domain local groups can be applied anywhere in the domain and can be useful for managing resource permissions.