The default groups, that we talked about before, like domain users and domain admins are security groups. They're used to grant or deny access to IT resources.

A distribution group, is only designed to group accounts and contacts for email communication. You can't use distribution groups for assigning permission to resources.

The service that hosts copies of the Active Directory database are called domain controllers, or DCs

Active Directory has been used to centrally manage networks of computers

One of the most common methods for this authentication is using Kerberos.

role-based access control, or RBAC