As defined by Microsoft, in Active Directory
server roles, computers that function as servers within a domain can have one of
two roles: member server or domain controller. Abbreviated as DC, domain controller is a server on a
Microsoft Windows or
Windows NTnetwork that
is responsible for allowing host access to Windows
domain resources. The domain controllers in your network are the centerpiece
of your Active Directory directory service.
It stores user account information, authenticates users and enforces security
policy for a Windows domain.
Securing Windows 2000 Domain Controllers This guide provides step-by-step guidance to help you implement security measures that will help lock down the configuration of your domain controllers.