All Windows computers are connected to my AD domain, romero.local. There are currently two Domain Controllers, a physical primary and virtual secondary. All users have accounts that are organized into Organizational Units, and several Group Policy Objects are deployed to specify how users use their machine.