Groups

The Windows NT next generation Directory Service dramatically simplifies the creation and management of security Groups. There is no concept of a "local group" or a "global group" from the Directory's point of view. A group created in the directory service is available to all domains in the tree. A group created using a local administrative tool on a particular server or workstation is "local" to that machine because it does not appear in the Directory. It is stored on the machine where it was created and can only be used there.