Centralized authentication and policy enforcement distinguish a domain from a workgroup. A domain uses a centralized directory service (Active Directory) on domain controllers, so users log in with domain credentials that are verified by servers across the network, and security and configuration policies can be pushed to all domain-joined machines via Group Policy. This provides scalable, consistent management for many computers and users. In a workgroup there is no central server. Each computer manages its own local user accounts, and there’s no automatic way to apply a single set of policies or to centrally authenticate users across the devices. Resources can be shared, but access relies on separate accounts on each machine and policies must be configured individually. The other statements are inaccurate for these reasons: domains aren’t limited to servers, domain accounts exist for clients, a domain does not eliminate user accounts, and a domain doesn’t automatically reuse workgroup credentials.