Active Directory stores data in the form of objects. In this article, let us take a complete overview on Active Directory object classes and attributes. An object can be a single element, such as a user, group, OU, sites, contacts or any devices such as a printer or a computer. In Active Directory, the objects are of two types:
Container Objects
Leaf objects
Container objects store…
Active Directory Object Attributes
March 2, 2021
What are Active Directory object attributes?
Active Directory (AD) object attributes are pieces of information or data that define the properties of the objects. For example, a computer object would have AD attributes such as computer name and DNS name. All AD attributes have an LDAP name that can be used in LDAP queries, such as displayname for ‘Full Name’, givenname for…
AD object classification
March 2, 2021
Active directory objects can be classified into two broad types.
1. Security principal objects
2. Resources
Security principal objects
The objects that can be authenticated by AD are called security principal objects. These objects have unique identifiers across the domain called SIDs (security Identifier). User accounts, computer accounts and security groups are the security principal…
Framework of Active Directory
March 2, 2021
The Active Directory structure is built on the domain level. The framework that holds the objects can be viewed at different levels namely forest, domain trees and domains.
At the top of the level is the forest. A forest holds all the Active directory data. The first domain added to the forest is the forest root domain. Information exchange happens within a forest. All domains within a…
Trusts in Active Directory: An overview
March 2, 2021
What you will learn from this article:
An Active Directory network may contain several domains in a hierarchical fashion. All the resources of one domain are not directly available to every other domain. The availability of resource sharing is governed by Active Directory trusts. In this article, we will take a look at what are trusts in Active Directory, how they are categorized, and the…
What are Domain Controllers?
March 2, 2021
What are Domain Controllers (DC)?
The computer machines that function as servers in the domain can either be a member server or a DC. A member server belongs to a particular domain, but it does not authenticate the users of that domain. There is no data about the entire AD network installed in it. DCs on the other hand, are servers responsible for allowing access to domain resources. It…
What is Global Catalog Server in Active Directory?
March 2, 2021
What you will learn from this article:
An Active Directory network would be made of forests and domains. The domain controllers (DC) of a particular domain would contain all the information of the domain they belong to. However, these DCs would not contain information about objects from other domains under the same forest. This may pose a problem when there is a need to look up information…
Active Directory FSMO Roles Explained
March 2, 2021
What you will learn from this article:
Active Directory (AD) relies on the AD replication process to keep the information updated across all its domain controllers (DC) in the network. This replication is done through the multi-master replication method, where if the information is modified in one DC, that DC initiates the replication process to update the other DCs. You can learn more about AD…
What you’ll learn:
Active Directory authentication and authorization are security processes. These processes are necessary for any environment so that the resources of an environment are not misused by anyone. In this article, we will take a look at authentication vs authorization in an AD environment, and how AD tackles these processes. Before going further, let’s take a look at…
What is LDAP?
The Lightweight Directory Access Protocol, commonly known as LDAP, is a communication protocol used to access directory servers. In other words, LDAP is used to store, update and retrieve data from a directory structure.
The term “lightweight” is used in comparison with X.500, which was the previous standard for directory services. X.500 was complicated, and it relied on…
