NT Gatekeeper: Using Windows NT 4.0 User Groups to Set Access Control Settings

Can you give me some guidelines for using Windows NT 4.0 user groups to set up access controls on file-server resources?

NT administrators must give a universe of users access to a universe of resources. You can individually set permissions for users to file-server resources, but groups make your job easier by letting you set permissions only once for an entire group of user accounts. Use these fundamental rules to deal with groups:

• Use global groups to group users.
• Use local groups to set permissions on resources.
• Put global groups into local groups to apply authorization settings.