In Windows 2000, a domain describes both an administrative boundary and a security boundary for a collection of objects that are relevant to a particular group of users on a network. A domain is an administrative boundary due to administrative privileges do not extend to other domains. It is a security boundary because every domain has a security policy that extends to all security accounts within the domain. Active Directory stores information about objects in one or more domains.