Understand local Windows security with AD

If you want to use AD authentication but you are not able to configure AD groups, then you can use local Windows groups to organize AD groups and users. You are essentially using local Windows groups on the Data Archive computer as a configuration tool to organize existing AD principals. Create local Windows groups on your Data Archive server and map them to the appropriate PI identities (Create mappings in SMT). Then place existing AD groups and users within the local Windows groups. In this configuration, AD still handles user authentication.