In Windows 2000 and XP, why should I join my computer to a domain?
A domain is a local area network (LAN) with workstations and servers under the control of one central security server or group of servers. These servers (called controllers) refer to a database that keeps track of users, their passwords, and what they're permitted to access. In other words, a domain is a controlled LAN that provides a single login for users to gain access to network resources like file storage and network printing. Indiana University's Active Directory is an example of a domain. For more information, see What is a domain?
Note: The term "domain" can also refer to a
set of common addresses on the World Wide Web. For example, the
.com, .net, .org, and
.edu addresses are called top-level domains, and
indiana.edu, iu.edu, and
iupui.edu are a few of IU's subdomains within the
.edu top-level domain. This document does
not discuss this type of domain.
The principal benefit of joining a workstation to a domain is central authentication. With a single login, you can access different services and resources without logging into each one. For example, if you use Outlook to access your Exchange account, and you want to access network printers in a Student Technology Center (STC) and map a drive to another computer, you'd normally have to log into each service (Exchange, the network print queue, and the other computer) separately. But if you're on a Windows computer joined to the domain controlling those resources, logging into that computer will also provide access to the other resources.
Another benefit is that settings in a computer's operating system can be changed or controlled by the network. This may not appeal to those who do not wish to relinquish that control, but if a computer needs a certain configuration to function fully on the network, computers belonging to the domain can receive that configuration automatically. For example, if certain resources accept only NTLMv2 as the security protocol, the domain can be configured to adjust the appropriate setting on every joined computer through a group policy. Your computer will then apply that policy when it joins. But if your computer is not joined, you will need to be aware of the change and then locate and adjust the setting manually.
Last modified on November 28, 2007.
