At the first what is the AD?
Active Directory (AD) is a directory service created by Microsoft for Windows domain networks. It is included in most Windows Server operating systems.
Active Directory provides a central location for network administration and security. Server computers that run Active Directory are called domain controllers. An AD domain controller authenticates and authorizes all users and computers in a Windows domain type network—assigning and enforcing security policies for all computers and installing or updating software. For example, when a user logs into a computer that is part of a Windows domain, Active Directory checks the submitted password and determines whether the user is a system administrator or normal user.
Active Directory makes use of Lightweight Directory Access Protocol (LDAP) versions 2 and 3, Kerberos and DNS.
Active Directory (AD) is a directory service created by Microsoft for Windows domain networks. It is included in most Windows Server operating systems.
Active Directory provides a central location for network administration and security. Server computers that run Active Directory are called domain controllers. An AD domain controller authenticates and authorizes all users and computers in a Windows domain type network—assigning and enforcing security policies for all computers and installing or updating software. For example, when a user logs into a computer that is part of a Windows domain, Active Directory checks the submitted password and determines whether the user is a system administrator or normal user.
Active Directory makes use of Lightweight Directory Access Protocol (LDAP) versions 2 and 3, Kerberos and DNS.
Active Directory is a special-purpose database — it is not a registry
replacement. The directory is designed to handle a large number of read
and search operations and a significantly smaller number of changes and
updates. Active Directory data is hierarchical, replicated, and
extensible. Because it is replicated, you do not want to store dynamic
data, such as corporate stock prices or CPU performance. If your data is
machine-specific, store the data in the registry. Typical examples of
data stored in the directory include printer queue data, user contact
data, and network/computer configuration data. The Active Directory
database consists of objects and attributes. Objects and attribute
definitions are stored in the Active Directory schema.
You may be wondering what objects are currently stored in Active
Directory. In Windows 2000, Active Directory has three partitions. These
are also known as naming contexts: domain, schema, and configuration.
The domain partition contains users, groups, contacts, computers,
organizational units, and many other object types. Because Active
Directory is extensible, you can also add your own classes and/or
attributes. The schema partition contains classes and attribute
definitions. The configuration partition includes configuration data for
services, partitions, and sites.
