Each domain has a security policy defining how objects both within and without the domain can interact. An AD domain can be the equivalent of multiple NT domains and most closely resembles the master ...