Mastering Active Directory - Second Edition

Active Directory Domain Services

In the previous sections in this chapter, I explained what Active Directory and what its components are. As a recap, I would like to list some key points about AD DS:

• AD DS can manage an organization's resources in a secure, efficient manner, and helps to organize objects in a hierarchical structure.
• The Active Directory forest is an identity infrastructure security boundary, and the forest can contain multiple domains with their own directory partitions.
• The Active Directory domain maintains a multi-master database to store data about objects and replicate it with other domain controllers in the domain. Any writable domain controller in the domain can add, modify, or delete objects from the Active Directory ...