Special Edition Using Microsoft Active Directory

Domains

A domain is a boundary for security, administration, and replication. A domain holds a distinct group of objects (users, computers, groups, and so on) that are related in some way. When you install the first Active Directory domain controller (DC), you are creating the first domain in your enterprise. This domain will hold users, computers, groups, organizational units (OU), printers, and a wide variety of other object types that have been previously defined by the schema.

→ See "Schema Components."

These domains are ordered in a hierarchy. If you have only one domain in your enterprise, you have a flat domain hierarchy. However, as your network grows, you might find yourself creating child domains. Figure 11.1 shows a simple parent-child ...