What is the difference between a domain local group and a global group?

Global groups can contain:
* Groups and accounts that reside in the same domain

Global groups can be assigned permissions to:
* Any object in any domain in the forest

Domain local groups can contain:
* Accounts, global and universal groups from any domain, and domain

local groups from the same domain.
Domain local groups can be assigned permissions to:
* Any object in the same domain

Groups with domain local scope help you define and manage access to
resources within a single domain. These groups can have as their members:

a.. Groups with global scope

b.. Groups with universal scope

c.. Accounts

d.. Other groups with domain local scope

e.. A mixture of any of the above

Use groups with global scope to manage directory objects that require daily
maintenance, such as user and computer accounts. Because groups with global
scope are not replicated outside of their own domain, accounts in a group
having global scope can be changed frequently without generating replication
traffic to the global catalog.

Hi

This is the reply for your question i guess "Domain local groups grant permissions to objects within the domain in which the reside. Global groups contain grant permissions tree or forest wide for any objects within the Active Directory. "