Windows Active Directory (AD)
• A Beginner-Friendly Overview
Workgroup vs Domain
• - Workgroup: Each computer manages itself,
no central control
• - Domain: Centralized control, all
computers/users managed by Active Directory
What is Active Directory?
• - Microsoft’s directory service
• - Stores and organizes information about:
• * Users
• * Computers 💻
• * Printers
• * Applications 📂
• - Provides login, security, and resource access
Advantages of Active Directory
• ✅ Centralized Management
• ✅ Improved Security
• ✅ Easier User & Computer Administration
• ✅ Scalability for Enterprises
• ✅ Single Sign-On (SSO)
What is a Domain?
• - A logical boundary for users, computers, and
policies
• - Example: company.local
• - Managed by Domain Controllers (DCs)
What is a Forest?
• - A collection of one or more domains
• - Domains inside a forest share:
• * Trust
• * Security policies
• * Global catalog
What is a Tree?
• - Group of domains in a hierarchical structure
• - Share the same namespace (like branches of
a tree 🌳)
Domain Controller (DC)
• - A server that runs Active Directory Domain
Services (AD DS)
• - Handles:
• * User authentication
• * Security policies
• * Replication across DCs
Additional / Backup DC
• - Primary DC = First domain controller
• - Additional DC (ADC) = Provides redundancy,
load balancing
• - Ensures login & resources available even if
one DC fails
FSMO Roles
• - Flexible Single Master Operations (5 roles):
• 1. Schema Master
• 2. Domain Naming Master
• 3. RID Master
• 4. PDC Emulator
• 5. Infrastructure Master
Global Catalog
• - Special domain controller role
• - Stores a searchable copy of all objects in the
forest
• - Helps users find resources quickly
Users & Groups
• - Users = Individual accounts
• - Groups = Collection of users with similar
permissions
• - Types:
• * Security Groups (permissions)
• * Distribution Groups (email lists)
DNS & AD
• - Active Directory depends on DNS
• - DNS helps locate:
• * Domain Controllers
• * Services inside the domain
Group Policy Objects (GPO)
• - GPO = Set of rules applied to users or
computers
• - Examples:
• * Password policies
• * Disable USB ports
• * Deploy desktop wallpapers
Recap
• - Workgroup vs Domain
• - AD basics (Domain, Forest, Tree)
• - Domain Controllers & FSMO roles
• - Users, Groups, DNS, GPO
• - AD = Foundation of enterprise IT security