In security, a subset of a large network served by its own Kerberos authentication server and ticket-granting server.