Workgroup architecture and domain architecture under Windows

Network of workgroup architecture

Workgroup architecture network is also known as peer-to-peer network (peer to peer)

Domain architecture network

Workgroup Architecture Network

Domain architecture network

Each computer in the network has an equal status, and resources and management are scattered on each computer.

The network is divided into domain controllers and member servers. If there are multiple domain controllers, the status between domain controllers is equal.

Each computer has a local security account manager (Security Accounts Manager,SAM) database that stores local accounts

The computers in the domain share a centralized catalog database (Directory Data-base), which stores all user accounts and other related data in the domain. The component that provides services in the domain is the Active Directory domain service, which is responsible for the addition, deletion, modification and query of the catalog database.

In general, users can only access local and shared resources

As long as the user account has appropriate permissions on the resources, the user account can log in to any computer in the domain and can access the resources of another computer on the network.

Suitable for small network

Suitable for medium and large network