Active Directory Security groups types

 

In Active Directory, security groups are used to manage access to resources by assigning permissions to users or other groups. There are several types of security groups in Active Directory:

1. Global Security Groups: These groups are used to grant access to resources within a single domain. They can contain user accounts and other global groups from the same domain. Global groups can be nested within other global groups within the same domain.

2. Domain Local Security Groups: Domain local groups are used to grant access to resources that reside in the same domain as the group. They can contain user accounts, global groups from any domain, and other domain local groups from the same domain. Domain local groups can also be nested within other domain local groups within the same domain.

3. Universal Security Groups: Universal groups are used to grant access to resources in any domain within the same forest. They can contain user accounts, global groups from any domain in the forest, and other universal groups. Universal groups can be nested within other universal groups.

4. Built-in Security Groups: These are default groups that are created automatically when Active Directory is installed. Examples include the Domain Admins, Domain Users, and Domain Guests groups. These groups have predefined permissions and are used for administrative purposes.

Each type of security group has its own scope and usage, and understanding their differences is crucial for effectively managing access to resources within an Active Directory environment.