Definition
A domain controller is a server that manages and authenticates user access and security policies within a network. It acts as a central authority, storing user accounts, passwords, and group memberships. When a user logs into a computer on the network, the domain controller verifies their credentials and grants appropriate access rights. This centralized management is crucial for enforcing security standards and controlling who can access specific resources. For instance, a domain controller can ensure only authorized personnel can access sensitive financial data. Unlike a standalone server which manages access locally, a domain controller handles authentication for an entire network domain. This concept is fundamental to network security and is frequently tested on certifications like CompTIA Security+ and CISSP.