Of course, it also helps to keep in mind that Global Groups can only contain users from a single domain, but there can be used in any domain, whereas Domain Local Groups can contain users from any domain, but they can only be used to grant access to resources that belong to the same domain as does the group.