Active Directory

Active Directory Domain Services is Microsoft’s directory technology for organising users, computers, groups and resources in a Windows domain and applying authentication and policy. Domain controllers store and replicate directory data, while DNS, time, sites and trusts support correct operation. Active Directory is not the same as Microsoft Entra ID, although environments can integrate them. Its central role makes privileged accounts, service accounts, backups, patching and replication important security and continuity concerns. Good administration uses least privilege, separate administrative identities, controlled group changes and monitored authentication. Recovery planning must include tested system-state or forest procedures rather than ordinary file copies alone. Health checks should examine replication, DNS, time and dependencies, not merely whether users can sign in.