A type of Windows Account that live in an Active Directory (AD) Domain Controller (DC) domain controller and can be used to log on to any computer that is joined to that Domain.
These accounts are unlike Local User Accounts that only exists on a single computer.
The rights to domain users are based on their access to resources, like files, servers, printers etc, on the domain.