A
Windows domain is a form of a
computer network in which all
user accounts, computers, printers and other
security principals, are registered with a central database located on one or more clusters of central computers known as
domain controllers. Authentication takes place on domain controllers. Each person who uses computers within a domain receives a unique user account that can then be assigned access to resources within the domain. Starting with
Windows 2000,
Active Directory is the Windows component in charge of maintaining that central database. The concept of Windows domain is in contrast with that of a
workgroup in which each computer maintains its own database of security principals.