1. A method of processing a change to a state of a particular managed server within an administrative domain, wherein the administrative domain includes a plurality of managed servers that use management instructions to configure management modules so that the configured management modules implement an administrative domain-wide management policy that comprises a set of one or more rules, the method comprising: storing the set of one or more rules, each rule specifying a service provided over a computer network, a provided-by portion indicating which of the managed servers are controlled by the rule in providing the service over the computer network, and a used-by portion indicating which of the managed servers are controlled by the rule in using the service accessed over the computer network; modifying an initial description of the particular managed server to generate a modified description of the particular managed server to indicate the particular managed server's changed state; comparing the initial description to the modified description, thereby specifying a description change; determining, based on the description change, whether to update current management instructions previously sent to the particular managed server; and responsive to determining to update the particular managed server's current management instructions: determining, based on the modified description, which rules within the set of rules specify a provided-by portion applicable to the particular managed server or a used-by portion applicable to the particular managed server, thereby specifying currently-relevant rules; obtaining cached previously-relevant rules previously determined based on the initial description; determining whether the currently-relevant rules differ from the cached previously-relevant rules for the particular managed server; and responsive to determining that the currently-relevant rules differ from the cached previously-relevant rules: determining a rule that should be added, removed, or modified relative to the cached previously-relevant rules; updating the cached previously-relevant rules based on the determined rule; generating, based on the determined rule, a management instruction executable by the particular managed server; and sending, to the particular managed server, the management instruction and an instruction to add, remove, or modify the management instruction on the particular managed server.