An entire group of users can be granted similar access privileges to resources in other domains. However, local groups may contain global groups from other domains, but user rights and permissions apply to the local domain. There is a great deal of confusion about these two categories. Part of the confusion arises because Windows NT is designed for both small and large settings, and ideas about groups change as the network grows. Here are some of the differences between Global and Local groups.
Local groups connect global groups to resources.
Multiple local groups can be given permissions to access a single resource. Although you may assign individuals to local groups, it is best not to do so. Although you can assign permissions to individuals without even having them in groups, it is definitely best not to do so. Make use of groups to organize people and permissions. Domain Users -This group contains all user accounts in a domain.