[Samba] Best practice - local groups - domain groups

[Karl Heinz Wichmann]

Hey guys

I have a generic questions about local / domain groups.

We have 1 Domain and 20 sites. In each site is a domain controller and a 
member server. The user have only access to share on the memberserver on 
their site.

Should a share be accessible for a local group or a domain group?
(replicaton, traffic, failure safety, security)

user -> domain group -> share
or
user -> domain group -> local group -> share


Karl Heinz