but you can move these roles to any other domain controller at will. Another key difference between NT and Active Directory is the process by which a server becomes a domain controller.