Active Directory Domain Services (AD DS) allows administrators to manage and store information about network resources and application data in a distributed database. AD DS organizes objects like users and devices into domains, which can be further organized into organizational units. Multiple domains grouped in a logical hierarchy form an Active Directory tree, and multiple trees form a forest. Domain Services provides centralized directory information and authentication to allow users and domains to communicate on the network. Lightweight Directory Services (AD LDS) is similar but uses a more flexible protocol to enable cross-platform capabilities.
Active Directory Domain Services (AD DS) allows administrators to manage and store information about network resources and application data in a distributed database. AD DS organizes objects like users and devices into domains, which can be further organized into organizational units. Multiple domains grouped in a logical hierarchy form an Active Directory tree, and multiple trees form a forest. Domain Services provides centralized directory information and authentication to allow users and domains to communicate on the network. Lightweight Directory Services (AD LDS) is similar but uses a more flexible protocol to enable cross-platform capabilities.
[DCSE 505B] CLASS NOTES [Windows Server administration I]
What is Active Directory Domain Services?
Active Directory Domain Services (AD DS) is a server role in Active Directory that allows admins to manage and store information about resources from a network, as well as application data, in a distributed database.
Domains. A group of objects, such as users or groups of devices, that share the same AD database makes up a domain.
Organizational units. Within a domain, organizational units are used to organize
objects within the domains.
Active Directory trees. Multiple domains grouped together in a logical hierarchy
make up an AD tree. The bonds between domains in a tree are known as "trusts."
Active Directory forests. This AD functional level is made up of multiple trees
grouped together. Trees in an AD forest share trusts, just like domains in a tree share trusts. Trusts enable constituent parts of a tree or forest to share things like directory schemas and configuration specifications.
Domain Services: Domain Services stores centralized directory information and
lets users and domains communicate. When a user attempts to connect to a device or resource on a network, this service provides login authentication, verifying the user's login credentials and access permissions
Lightweight Directory Services (LDS)
AD LDS is similar to Domain Services, but it uses Lightweight Directory Access
Protocol (LDAP), which has fewer restrictions. AD LDS enables cross-platform capabilities that, for instance, let Linux-based computers function on the network