Windows 2000 provides the following built - in groups of accounts and permissions Windows2000提供了下列内置组帐户和权限：
2.
A domain is a grouping of accounts and network resources under a single domain name and security boundary 域是在同一个域名和安全范围内的一组帐户和网络资源的集合。
3.
Dacls contain multiple access control entries aces that associate a principal usually a user account or group of accounts with a rule that governs the use of the resource Dacl包含多个访问控制项( ace ) 。访问控制项将一个主体（通常是一个用户帐户或用户帐户组）与一个控制资源的使用的规则相关联。
