Introduction to ADDS


Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Initially, Active Directory was only in charge of centralized domain management. Starting with Windows Server 2008, however, Active Directory became an umbrella title for a broad range of directory-based identity-related services.

A server running Active Directory Domain Service (AD DS) is called a domain controller. It authenticates and authorizes all users and computers in a Windows domain type network—assigning and enforcing security policies for all computers and installing or updating software. 

For example, when a user logs into a computer that is part of a Windows domain, Active Directory checks the submitted password and determines whether the user is a system administrator or normal user. Also, it allows management and storage of information, provides authentication and authorization mechanisms and establishes a framework to deploy other related services: Certificate Services, Active Directory Federation Services, Lightweight Directory Services, and Rights Management Services.

A directory is a hierarchical structure that stores information about objects on the network. A directory, in the most generic sense, is a comprehensive listing of objects. A phone book is a type of directory that stores information about people, businesses, and government organizations. Phone books typically record names, addresses, and phone numbers. 

Active Directory (AD) is a Microsoft technology used to manage computers and other devices on a network. It is a primary feature of Windows Server, an operating system that runs both local and Internet-based servers.

Benefits of Active Directory :
  1. Hierarchical organizational structure. 
  2. Multimaster Authentication & Multimaster replication (the ability to access and modify AD DS from multiple points of administration) 
  3. A single point of access to network resources. 
  4. Ability to create trust relationships with external networks running previous versions of Active Directory and even Unix.
Active Directory 'Services':

Active Directory provides several different services, under which one of  the key service is “Active Directory Domain Services, ” or AD DS. 

Active Directory services include: 

(You may use DCLDR to recall the services)



  1. Domain Services  (ADDS)– Stores centralized data and manages communication between users and domains; includes login authentication and search functionality 
  2. Certificate Services (AD CS) – It generates, manages and shares certificates. A certificate uses encryption to enable a user to exchange information over the internet securely with a public key. 
  3. Lightweight Directory Services (ADLDS) – Supports directory-enabled applications using the open (LDAP) protocol. 
  4. Directory Federation Services (ADFS) – Provides single-sign-on (SSO) to authenticate a user in multiple web applications in a single session. 
  5. Rights Management (AD RMS)– It controls information rights and management. AD RMS encrypts content, such as email or Word documents, on a server to limit access.
Domain Controllers: A server that is running AD DS is called a domain controller. Domain controllers host and replicate the directory service database inside the forest. The directory service also provides services for managing and authenticating resources in the forest.

The logical structure of AD

Object: Active Directory structures are arrangements of information about objects.Each object represents a single entity—whether a user, a computer, a printer, or a group—and its attributes.

Forest, Trees and Domain: 

A domain is defined as a logical group of network objects (computers, users, devices) that share the same Active Directory database. 

A tree is a collection of one or more domains and domain trees in a contiguous namespace, and is linked in a transitive trust hierarchy. 

Forest : The top of the structure is called the forest. A forest is a collection of trees.

Organizational units   The objects held within a domain can be grouped into organizational units (OUs). An organizational unit (OU) is a subdivision within an Active Directory into which you can place users, groups, computers, and other organizational units. You can create organizational units to mirror your organization's functional or business structure.
DAY 4 Introduction to ADDS

Introduction to ADDS

Introduction to ADDS


Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Initially, Active Directory was only in charge of centralized domain management. Starting with Windows Server 2008, however, Active Directory became an umbrella title for a broad range of directory-based identity-related services.

A server running Active Directory Domain Service (AD DS) is called a domain controller. It authenticates and authorizes all users and computers in a Windows domain type network—assigning and enforcing security policies for all computers and installing or updating software. 

For example, when a user logs into a computer that is part of a Windows domain, Active Directory checks the submitted password and determines whether the user is a system administrator or normal user. Also, it allows management and storage of information, provides authentication and authorization mechanisms and establishes a framework to deploy other related services: Certificate Services, Active Directory Federation Services, Lightweight Directory Services, and Rights Management Services.

A directory is a hierarchical structure that stores information about objects on the network. A directory, in the most generic sense, is a comprehensive listing of objects. A phone book is a type of directory that stores information about people, businesses, and government organizations. Phone books typically record names, addresses, and phone numbers. 

Active Directory (AD) is a Microsoft technology used to manage computers and other devices on a network. It is a primary feature of Windows Server, an operating system that runs both local and Internet-based servers.

Benefits of Active Directory :
  1. Hierarchical organizational structure. 
  2. Multimaster Authentication & Multimaster replication (the ability to access and modify AD DS from multiple points of administration) 
  3. A single point of access to network resources. 
  4. Ability to create trust relationships with external networks running previous versions of Active Directory and even Unix.
Active Directory 'Services':

Active Directory provides several different services, under which one of  the key service is “Active Directory Domain Services, ” or AD DS. 

Active Directory services include: 

(You may use DCLDR to recall the services)



  1. Domain Services  (ADDS)– Stores centralized data and manages communication between users and domains; includes login authentication and search functionality 
  2. Certificate Services (AD CS) – It generates, manages and shares certificates. A certificate uses encryption to enable a user to exchange information over the internet securely with a public key. 
  3. Lightweight Directory Services (ADLDS) – Supports directory-enabled applications using the open (LDAP) protocol. 
  4. Directory Federation Services (ADFS) – Provides single-sign-on (SSO) to authenticate a user in multiple web applications in a single session. 
  5. Rights Management (AD RMS)– It controls information rights and management. AD RMS encrypts content, such as email or Word documents, on a server to limit access.
Domain Controllers: A server that is running AD DS is called a domain controller. Domain controllers host and replicate the directory service database inside the forest. The directory service also provides services for managing and authenticating resources in the forest.

The logical structure of AD

Object: Active Directory structures are arrangements of information about objects.Each object represents a single entity—whether a user, a computer, a printer, or a group—and its attributes.

Forest, Trees and Domain: 

A domain is defined as a logical group of network objects (computers, users, devices) that share the same Active Directory database. 

A tree is a collection of one or more domains and domain trees in a contiguous namespace, and is linked in a transitive trust hierarchy. 

Forest : The top of the structure is called the forest. A forest is a collection of trees.

Organizational units   The objects held within a domain can be grouped into organizational units (OUs). An organizational unit (OU) is a subdivision within an Active Directory into which you can place users, groups, computers, and other organizational units. You can create organizational units to mirror your organization's functional or business structure.