Proper User of "Windows Domain" Resource Type

Hello all,

I've recently inherited an installation of Password Manager Pro which has been worked on by various untrained administrators over several years, and I'm trying to clean it up. I'm confused about the proper use of the "Windows Domain" resource type. My belief is that I should only have one "Windows Domain" resource, since we only have one Active Directory domain, and that I should add to it domain accounts that I want to use in PMP, as well as service and administrative accounts used on various resources. Then I would copy the service accounts to resources which use those accounts to control services.

Is all of that correct? There are several resources in our installation that are marked as "Windows Domain." Some of them are member servers. One is a domain controller.

Any help is appreciated!

Thank you in advance,
- Steve Kadish