What is the difference between a workgroup and a domain in Windows networks?

What is the difference between a workgroup and a domain in Windows networks?

• A. A workgroup is a peer-to-peer network without centralized authentication; a domain uses domain controllers for centralized authentication and policy enforcement.
• B. A domain is peer-to-peer; a workgroup uses domain controllers.
• C. Both are the same with different names.
• D. A workgroup uses centralized authentication; a domain does not.

Answer: (A)

The key idea here is how authentication and policy management are handled in Windows networks. In a workgroup, computers are peers and each machine manages its own local user accounts, with no central authority to verify credentials or push policies. This means you log on with a local account on each PC, and access to resources on other machines is governed by the local permissions on those machines. In a domain, however, domain controllers running Active Directory centralize authentication and policy enforcement. Users log on with domain credentials that are validated by the domain controller, and administrators can apply policies, deploy software, and manage settings across many computers from one place using tools like Group Policy. This centralized approach is what sets a domain apart from a workgroup. The other statements don’t fit because they reverse or deny these realities: a domain is not merely a peer-to-peer setup, and a workgroup does not use centralized authentication or domain controllers. Likewise, the two are not the same, and a domain does provide centralized authentication, while a workgroup does not.

The key idea here is how authentication and policy management are handled in Windows networks. In a workgroup, computers are peers and each machine manages its own local user accounts, with no central authority to verify credentials or push policies. This means you log on with a local account on each PC, and access to resources on other machines is governed by the local permissions on those machines. In a domain, however, domain controllers running Active Directory centralize authentication and policy enforcement. Users log on with domain credentials that are validated by the domain controller, and administrators can apply policies, deploy software, and manage settings across many computers from one place using tools like Group Policy. This centralized approach is what sets a domain apart from a workgroup.

The other statements don’t fit because they reverse or deny these realities: a domain is not merely a peer-to-peer setup, and a workgroup does not use centralized authentication or domain controllers. Likewise, the two are not the same, and a domain does provide centralized authentication, while a workgroup does not.