What is active directory

Overview

Active Directory (AD) is a directory service developed by Microsoft that stores and manages information about network resources and user identities on Windows-based networks. It acts as a centralized database that allows administrators to manage user accounts, computers, printers, and other network resources from a single location. When employees log into their computers at work, they are typically authenticating against an Active Directory server.

Core Functions

The primary function of Active Directory is to provide centralized authentication and authorization. When a user logs in with their username and password, AD verifies their credentials against its database. Once authenticated, AD determines what resources that user has permission to access. This eliminates the need for each individual computer to manage its own user accounts and security policies.

Structure and Organization

Active Directory organizes information in a hierarchical tree structure. At the top level is the Domain, which represents an administrative boundary. Within domains, administrators create Organizational Units (OUs) to group users and computers logically—for example, by department or location. This hierarchy allows for simplified management of large networks with thousands of users and devices.

Group Policy

One of AD's most powerful features is Group Policy, which allows administrators to apply configurations and security settings to groups of users or computers automatically. For instance, a company might use Group Policy to enforce password complexity requirements, restrict access to certain applications, or configure network settings across all employee computers simultaneously.

Security and Access Control

Active Directory implements role-based access control (RBAC) through the use of security groups. Administrators can assign users to groups and then grant permissions to resources based on group membership. This approach simplifies managing access for hundreds of employees—adding a new user to the appropriate security groups automatically grants them the correct permissions.

Modern Cloud Integration

Microsoft offers Azure Active Directory (now called Microsoft Entra ID) as a cloud-based version of Active Directory. This cloud service enables organizations to manage identities for users both on-premises and in the cloud, supporting modern hybrid work environments and cloud applications.