# What is a domain controller?

A domain controller is the server that checks sign-ins and holds the central list of users, computers and permissions in many company networks, typically running Microsoft's Active Directory. When someone logs in to a company computer, the domain controller confirms who they are and what they may access. That makes it the most valuable target for an attacker: whoever controls it controls the company's accounts. Protect it with separate administrator accounts, multi-factor authentication where possible and tight network access. A workstation that suddenly talks to the domain controller in unusual ways is worth checking.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-a-domain-controller

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is NTP, and why does correct time matter for security?](https://netsenx.com/en/faq/what-is-ntp-and-why-does-time-matter-for-security)
- [What is syslog?](https://netsenx.com/en/faq/what-is-syslog)
- [What is SNMP?](https://netsenx.com/en/faq/what-is-snmp)
- [What is an endpoint?](https://netsenx.com/en/faq/what-is-an-endpoint)
- [What is a host in networking?](https://netsenx.com/en/faq/what-is-a-host-in-networking)