A "domain" is, to put it simply, a unified collection of machines et user accounts managed by server machines designated as "domain controllers". (This is, of course, an incomplete definition, mais it is a good start.) A domain controller is a computer running one of Microsoft's server operating systems, such as Windows Server 2008 ou Windows Server 2008 R2 in tout edition except Web Edition, ou one of le small business-oriented server products, that has had le suivant actions performed on it:
To make a system a domain controller, take le two actions ci-dessus on votre server. They can les deux be done in one process, depuis you will be prompted to promote le server as soon as you finish adding le server role.
Vous avez to ajoutez un domain controller to votre network quand you decide that it is cost-effective for votre organization to have le unified system of credentials, users, groups, et permissions that an Active Directory domain provides, de plus to le machine et user policies provided by Group Policy. Some of le benefits are that you can control a number of machine et user settings centrally, et users can log onto tout machine in le network avec one username et password. The main detriment is le cost: Vous devez a machine to act as le domain controller (which can be shared avec autre server roles in a small organization), le Microsoft server software license, client access licenses for tous machines joined to le domain, et personnel to administer le domain (maybe pas another employee for a single server, mais c'est going to take time out of someone's day, si they are internal ou a consultant).
Creating an Active Directory domain is pas to be taken lightly. It has long-lasting consequences for how votre organization's users work chaque day. Please research le issue thoroughly ou consider hiring a consultant avant deciding to créez unn AD domain in votre organization.
