Platform SDK: Active Directory, ADSI, and Directory Services

Domains

A domain is a single security boundary of a Windows® 2000 computer network. For more information on Windows® 2000 domains, see your Windows® 2000 documentation. Active Directory is made up of one or more domains. On a standalone workstation, the domain is the computer itself. A domain can span more than one physical location. Every domain has its own security policies and security relationships with other domains. When multiple domains are connected by trust relationships and share a common schema, configuration, and global catalog, you have a domain tree. Multiple domain trees can be connected together into a forest. All the domains in a forest also share a common schema, configuration, and global catalog.