Under the Groups tab, select the Enable Group Synchronization check box.
Select one of the following Group Synchronization methods to specify how Identity Synchronization for Windows will detect and synchronize various groups:
Domain Global Security
Domain Global Distribution
For more information about Domain Global Security, Domain Global Distribution, and Active Directory; see the Microsoft Active Directory documentation.