Active Directory User and Computer Accounts The Windows 2000 operating system uses a user or computer account to authenticate the identity of the user or computer and to authorize or deny access to domain resources. For example, users who are members of the Enterprise Administrators group are, by default, granted permission to log on at any domain controller in the Active Directory forest.
Administrators can audit actions performed by users or computer accounts. You add, disable, reset, or delete user and computer accounts using the Active Directory Users and Computers tool.
The account establishes an identity for the user; the operating system then uses this identity to authenticate the user and grant him or her authorization to access specific domain resources. User accounts can also be used as service accounts for some applications. That is, a service can be configured to log on (authenticate) as a user account, and it is then granted access to specific network resources through that user account.
Learn more about Active Directory here:
brainly.com/question/14364696
#SPJ4