You can give domain local security groups rights and permissions on resources that reside only in the same domain where the domain local group is located.A global group is a group that can be used in its own domain, in member servers and in workstations of the domain, and in trusting domains.