Domain controller

On Windows Server Systems, a domain controller (DC) is a server that responds to security authentication requests (logging in, checking permissions, etc.) within the Windows Server domain.

In Windows NT, one domain controller per domain was configured as the Primary Domain Controller (PDC); all other domain controllers were Backup Domain Controllers (BDC).

A BDC could authenticate the users in a domain, but all updates to the domain (new users, changed passwords, group membership, etc) could only be made via the PDC, which would then propagate these changes to all BDCs in the domain.

If the PDC was unavailable (or unable to communicate with the user requesting the change), the update would fail. If the PDC was permanently unavailable (e.g. if the machine failed), an existing BDC could be promoted to PDC.

Read the rest of the article here