In Active Directory, Local Groups serve what purpose?

In Active Directory, Local Groups serve what purpose?

• A. Local Groups require Global Groups to function
• B. Local Groups can be used to assign permissions to domain resources
• C. Local Groups apply to a specific computer for local resource permissions
• D. Local Groups apply to resources in the domain across domain boundaries

Answer: (C)

Local Groups are used to manage access to resources on a single computer. They are created on that machine, and adding users to the group grants those users the group’s permissions for the computer’s local resources—like local files, folders, printers, and other local services. Because the scope is the local machine, the permissions don’t extend to other computers or to domain resources across boundaries. You can include domain users or domain groups in a local group, but the effect stays local to that computer. That's why this option best describes the purpose: the permissions apply to resources on that specific computer. Local Groups don’t require Global Groups to function, and they aren’t used to control domain-wide resources across domain boundaries.

Local Groups are used to manage access to resources on a single computer. They are created on that machine, and adding users to the group grants those users the group’s permissions for the computer’s local resources—like local files, folders, printers, and other local services. Because the scope is the local machine, the permissions don’t extend to other computers or to domain resources across boundaries. You can include domain users or domain groups in a local group, but the effect stays local to that computer. That's why this option best describes the purpose: the permissions apply to resources on that specific computer. Local Groups don’t require Global Groups to function, and they aren’t used to control domain-wide resources across domain boundaries.