We've been wanting to re-provision access in our environment based on security best practices, and one of the things we've been struggling with is figuring out which groups to use where.
Specifically we're not sure when to use Domain Local Groups versus Global Groups, and I think we may have a lot of improvement to make in regards to the use of our groups, so figured I'd get some clarity on this.
Could someone please provide a simple guideline on when to use a Domain Local Group versus a Global Group?
Thank you.