Servers and workstations have their own local accounts database. This means it is possible for an administrator on the workstation to create a local workstation account, which is not the same as the domain account, and allow users to logon to the local computer rather than the domain. Currently, you should have the PDC and a Windows NT workstation running. You are logged onto the domain at the PDC as administrator, and as yet, have not logged onto the NT Workstation computer. Summary Domain controllers do not allow users to logon locally to the computer.
Users actually logon to the domain.
Workstations and servers have their own accounts database, thus users can be granted permission to logon locally, as well as the domain.