Original fictional directory card. No domain was created. No account was signed in.
club.lab.invalid and notes.lab.invalid use the .invalid suffix. They are labels, not queries.
192.0.2.44 is a documentation address. No packet was sent.

Directory name on this card: club.lab.invalid
This is the name of the directory. It is not a website and it is not an A record.

Objects
User: mina
User: noor
Group: readers
  Members: mina and noor
  A security group collects accounts so a right can be given once.
Domain controller: dc-1
  A server that holds a complete copy of this domain's directory.
  Another controller would hold a copy too. This card has one.
  Clients use DNS to locate a domain controller. Finding the server is not the same as holding the accounts.

Separate DNS record
Name: notes.lab.invalid
Type: A
Data: 192.0.2.44
This record answers an address question. It does not hold user mina.
It is not a domain controller.
Reading an A record, or owning a DNS name, does not grant access to the directory.

Check: the DNS record is notes.lab.invalid.