A group that assigns permissions to shared resources, and assigns user rights to security groups in Active Directory.
a collection of user accounts, computer accounts, and other groups that can be managed as a single unit from a security perspective
A set of principal identities that is registered with the DCE security service. In addition to principal names, security group names can be used as entries in access control lists.