You have started from the wrong end. And that "security thing" you are referring to is called a domain, which is usually controlled by an LDAP server of some sort, most likely Microsoft ActiveDirectory. And it's not a "security system" at all, it's an account/access control system.
Good luck hacking those...