The first step you must take in preparing to run the Security Synchronizer is to decide the source of Windows security information. You can create Windows groups in the local computer's security configuration or on a domain controller. You must determine if the security information should come from a Windows domain, the local computer, or both. One factor to consider when making this decision is the network configuration at the site where the Security Synchronizer is used.
NOTE: It is important to understand that the source of Windows security information determines where Windows groups are to be located, not where the Windows user accounts are to be found. Depending on whether local or domain security groups are used, the members of these Windows groups can be local user accounts, domain user accounts, or both. Domain groups may only contain domain user accounts, while a local group can contain both local and domain user accounts.
