The default groups, that we talked about before, like domain users and domain admins are security groups. They're used to grant or deny access to IT resources.