Domains and workgroups in Windows 2003

Users can useWindowsThe server 2003来 builds a network to share resources on other computers on the network.WindowsServer 2003 supports two types of networks.
1. The Working Group $| (E:LQNQ
2. Domain
The workgroup structure is a distributed management model, suitable for small networks. The domain structure is a centralized management structure and is suitable for larger networks.
Here is a detailed descriptionDomains and Workgroups: {9uuw+t,g! P!z Oxp
1. Structure of the Working group; a p8n8[4rq7s [
The ⑴ workgroup consists of a network of computers that share resources from the computer to other users.
The ⑵ Workgroup Network can also be called a "peer-to-peer" network, because each machine in the workgroup is equal to the 5w Fcgc|-k
⑶ each computer in the workgroup network (can beWindows2003,WindowsXpWindows2000,WindowsNT, etc.) has its own "Local Security account Database", known as the "Security Account Manager (SAM, secutity accounts Manager) database", and if a user wants to access resources on each computer, the user's account must be created within the SAM database of that computer. Therefore, if this user can access the resources of all computers in the workgroup, then the user's account should be in the SAM database of all computers, so it is troublesome to update all the SAM database related data when the user's information changes. Fsnek}:t
The ⑷ workgroup does not necessarily have a server-level machine h "@:v p._:j
⑸ if the number of computers in the enterprise is not many, you can use the Workgroup network structure
2. The structure of the domain
The difference between a A⑴ domain and a workgroup is that all computers share a centralized directory database in a domain's network structure that contains user accounts and security data throughout the domain. InWindowsThe component responsible for directory services within Server 2003 is the Active Directory (Active Directory), which is responsible for adding, deleting, changing, and querying the directory database. InWindowsServer 2003 network, this directory database is stored in the so-called "domain controller", and only server-level computers can play the role of a domain controller. InWindowsIn the Server 2003 family, it must beWindowsServer 2003 Standard Edition level above computers can play the role of domain controller
⑵ A network can have multiple domains and can build these domains into a "domain tree"
The computer network in the ⑶ domain structure can exist the following computers ' y0x ' Q,FH-Q-VN
Domain controller: onlyWindowsServer 2003 Standard Edition level above the computer can play the role of domain controller, a domain can have multiple domain controllers, each domain controller status is equal, they each store a same Active Directory, if updated user information, all domain controllers are updated. When a user logs on to a computer from within a domain, one of the domain controllers is responsible for verifying that the user's information is correct according to the account data in the Active Directory. "Xh0s!v&hz
Member servers: member servers includeWindowsServer 2003,WindowsServer orWindowsNT Server. When users install the above server-level operating system on their computers, and if they want users to log in to the accounts in the Active Directory on those computers, they must be joined to the domain, where they are referred to as "member servers" with no Active Directory data in the member server. They are not responsible for auditing the domain's user account name and password 2y ' t}px/1vj
Other computers: The domain can also haveWindowsXP Professional,WindowsProfessional,WindowsNT Workstation etc. (WindowsXP Home Editon cannot be joined to the domain) computer. When users install the above server-level operating system on their computers, they must be joined to the domain if they want users to log on to the accounts in the Active Directory on those computers.