Domain Local vs Global Groups

Global Group:

Members of Global Group can come only from local domain but members can access resources in any domain.

Domain Local Group:

Members of Local Group can come from any domain but members can access resources only in local domain.

Universal Group:

Members can come from any domain and members can access resource in any domain.

List a user's group membership

List group membership for a user

C:\Users\jqiu-admin>dsget user "CN=Peter Fordyce,OU=Kordia Solutions,OU=Division
s,OU=Prod,DC=internal,DC=local" -memberof > hi.txt


Finding Groups in Which a User Is a Member
Click Start, and then click Run.
In the Open box, type cmd.
At the command prompt, type the following command:
dsget user user_dn -memberof
This command uses the following value:
user_dn specifies the distinguished name of the user object for which you want to display group membership.
To view the complete syntax for this command, at a command prompt, type dsget user /?.