domänkontrollant

A domänkontrollant, or domain controller in English, is a server that runs a directory service and manages security and access to a network. It is a core component of Microsoft's Active Directory Domain Services (AD DS). The primary role of a domain controller is to authenticate users and computers, and enforce security policies within a domain.

When a user logs into a computer on the domain, the domain controller verifies their credentials, such as username and password. If the authentication is successful, the domain controller grants the user access to network resources based on their permissions. It stores information about all users, computers, groups, and other network objects, organized in a hierarchical structure.

Domain controllers also handle critical functions like managing group policies, which define settings and configurations for users and computers across the domain. This includes security settings, software installations, and desktop environment customizations. In larger networks, multiple domain controllers are often deployed to provide redundancy and load balancing, ensuring continuous availability of authentication and directory services. The proper functioning of domain controllers is essential for the security and manageability of any Windows-based network environment.