They log onto the domain and not the actual computer.
Go to start->programs->administrative tools->active directory users and computers->right click on users folder and create it
Domain Users.
Universal group
The Active Directory administrative tools can only be used from a computer with access to a domain. The following Active Directory administrative tools are available on the Administrative Tools menu: Active Directory Users and Computers (dsa.msc) Active Directory Domains and Trusts (domain.msc) Active Directory Sites and Services (dssite.msc)
No need for different password. The user can be authenticated with the same password for the DCs of a domain.
group policy
Contains a < domain > container (for example, the abc.com container), which stores users, computers, groups, and other objects for a specific Windows domain (for example, the abc.com domain). Updates to the < domain > container are replicated to only domain controllers within the domain and to Global Catalog servers if the update is made to an attribute that is marked for replication to the Global Catalog. The < domain > container is displayed in the Active Directory Users and Computers console. The hierarchy of domain directory partitions can be viewed in the Active Directory Domains and Trusts console, where trust relationships between domains can be managed.
controller
domain local group
*Schema NC, *Configuration NC, * Domain NC Schema NC This NC is replicated to every other domain controller in the forest. It contains information about the Active Directory schema, which in turn defines the different object classes and attributes within Active Directory. Configuration NC Also replicated to every other DC in the forest, this NC contains forest-wide configuration information pertaining to the physical layout of Active Directory, as well as information about display specifiers and forest-wide Active Directory quotas. Domain NC This NC is replicated to every other DC within a single Active Directory domain. This is the NC that contains the most commonly-accessed Active Directory data: the actual users, groups, computers, and other objects that reside within a particular Active Directory domain
Logon Events.
A Domain is a logical group of computers having versions of Microsoft Windows OS.All these computers shares a central database which is known as Active Directory.An Active Directory is basically group of computers, users, objects, etc.