For ease of administration, the preferred domain model is the single domain model. If the single domain model cannot be used, the second choice should be the single master domain model. If neither of these is available, an administrator can use trust relationships to centralize all user administration into a single domain, eliminating the need to administer each domain separately.