Active Directory
Active Directory (AD) is a directory service developed by Microsoft for use in Windows Server operating systems. It plays a central role in managing and organizing resources and security in a Windows network environment. Here are some key aspects of Active Directory:
Directory Service: At its core, Active Directory is a directory service, which is a specialized database that stores and organizes information about network resources such as users, computers, printers, and security objects like groups and permissions.
LDAP-Based: Active Directory is based on the Lightweight Directory Access Protocol (LDAP), which is a standard protocol for accessing and managing directory information. This means that it provides a standard way to interact with and retrieve information from the directory.
Domain Controller: Active Directory relies on domain controllers to manage directory information and authenticate users and devices. A domain controller is a Windows server that stores a writable copy of the Active Directory database.
Domains: Active Directory organizes resources into logical groupings called domains. A domain is a security boundary that defines administrative privileges and policies. User accounts, computers, and other resources are typically associated with a specific domain.
Forest: A forest is a collection of one or more domains that share a common schema, global catalog, and trust relationship. It's the highest level of organization in Active Directory. Each domain in a forest can have its own policies and security settings.
Organizational Units (OUs): Within domains, resources are often organized into OUs. OUs are containers that allow for the grouping of resources and the application of specific policies to those groups.
Users and Groups: Active Directory manages user accounts and groups. User accounts are used for authentication and access control, while groups provide a way to organize and manage users and grant permissions more efficiently.
Group Policy: Active Directory includes Group Policy, which allows administrators to define and manage settings for users and computers. Group Policy is a powerful tool for enforcing security policies and configurations.
Security: Active Directory provides robust security features, including user authentication, access control, and encryption. It plays a crucial role in ensuring the security of a Windows network.
Replication: Active Directory uses replication to ensure that data is consistent across multiple domain controllers within a network. This redundancy is essential for fault tolerance and disaster recovery.
Global Catalog: The global catalog is a special type of domain controller that holds a partial replica of all objects in the forest. It's used for searching and locating objects across the entire forest.
Single Sign-On (SSO): Active Directory enables single sign-on, allowing users to log in once and gain access to various resources within the network without repeatedly entering credentials.
Last updated