It does have the advantage of being the fastest protocol for small workgroup networking. Windows NT can operate in one of two different authentication modes, Workgroup or Domain. Because of this, every machine must have a local account for every user that will use the machine. This model is very quick to set up and everyone can maintain their own machine. The drawbacks are that whenever a change needs to be made to an account, it must be performed on every machine that account uses and that whenever a machine is added, all accounts that need to use that machine must be created again on that machine.
Domain is for larger groups.
In a domain, a special server, called the Primary Domain Controller or PDC, holds the authentication database and verifies permissions when resources are accessed. This model is easier to manage since a change has to be made just once to a domain to have effect everywhere. Authentication can be maintained in case of a problem with the PDC by implementing one or more Backup Domain Controllers or BDCs. BDCs can also be arranged geographically to minimize the number of network hops an authentication request must make. This can improve network performance in larger implementations.