Best Practice for a single domain model

[royirvin]

We have one site, one domain NT4&nbsp;&nbsp;migrating to a single site, single domain W2K AD Native mode structure<br><br>We need to know what the best practice to use when developong Group policies, etc&nbsp;&nbsp;for our limited OUs. We do not need to worry about the difference in SCOPE defined by UNIVERSAL, DOMAIN LOCAL and similar terms.<br><br>Given our extremely simple structure, where do we place our Group policies, etc. At the UNIVERSAL, DOMAN LOCAL, or where.?&nbsp;&nbsp;We only have one level to deal with.!!<br><br>AND.....I am STILL not sure I understand the difference between Distribution Groups and Security Groups. I believe I understand the princile of DCALs used as filters on a Group Policy, but&nbsp;&nbsp;things&nbsp;&nbsp;are still a little fuzzy for us in this area. <br><br>Our problem has mostly been a need to&nbsp;&nbsp;&quot;filter out&quot;&nbsp;&nbsp;the copious advice in MS DOCs covering the more normal migration strategies for more complex environments