As I've understood it: Global groups are used in domain(s) in the same forest. Domain local only in your own domain. For cross-forest security you tie global groups into Universal ones (which, as I've heard, never should be messed with once created cause thigns are likely to go wrong).
?
_________________________
The tart is out there
