In Microsoft Active Directory, what are security and distribution groups?

In Microsoft Active Directory, when you create a new group, you must select a group type. The two group types, security and distribution, are described below:

• Security: Security groups allow you to manage user and computer access to shared resources. You can also control who receives group policy settings. This simplifies administration by allowing you to set permissions once on multiple computers, then to change the membership of the group as your needs change. The change in group membership automatically takes effect everywhere. You can also use these groups as email distribution lists.
  
  
• Distribution: Distribution groups are intended to be used solely as email distribution lists. These lists are for use with email applications such as Microsoft Exchange or Outlook. You can add and remove contacts from the list so that they will or will not receive email sent to the distribution group. You can't use distribution groups to assign permissions on any objects, and you can't use them to filter group policy settings.

Also see:

• In Active Directory, what are the differences between universal, global, and domain local groups?
• In Windows 2000 or XP, how do I share a folder, printer, or drive on the network?
• In ADS at IU, how do I add a Windows 2000, XP Professional, or 2003 computer to my organizational unit?
• On a computer, what are administrators and administrative rights?