Putting Users in Groups

Following on from recent discussions I'm trying to put users into the
correct security groups ......

In reviewing our currently set up users, they all (apart from the
Administrator) appear to be members of the following three groups:

1) Domain Users
2) Remote Web Workplace Users
3) <localdomainname>

In fact, our users fall broadly into three groups:

a) Local users (both static and mobile) who also require OWA
b) Remote Users who only require Intranet Access
c) Remote Users who require Application access via Terminal Services
(and RWW)

I'm not sure what 3) is! Documentation says its to do with
Distribution Groups. Does this mean its about appearing in an Address
Book?

I assume it is correct for a) to have all of 1), 2) and 3) ?

I'm unclear what group b) need to just get to our Intranet ?

I gues its obvious group c) need 2) - but do they need 1) and 3) if
their only requirement is to TS to the application ?

I've printed out various help files and Security Groups listings but
am finding it difficult to correlate the various lists, so any help
appreciated!

TIA,

JohnK


.