~/moritzsamrock_

Active Directory Domain

Also known as:AD Domain

Active Directory Domain: A logical administration and replication unit within an Active Directory forest. Domain controllers in the domain hold copies of the same domain partition and provide authentication and directory services. A domain has a DNS name and its own policies, but it is not a fully independent security boundary inside the same forest.

How it works and where it fits

Active Directory Domain denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

  • Active Directory ForestActive Directory ForestTop-level Active Directory structure whose domains share a schema, configuration, global catalog, and mutual trust foundation.: Top-level Active Directory structure whose domains share a schema, configuration, global catalog, and mutual trust foundation.
  • Active Directory TreeActive Directory TreeHierarchy of one or more Active Directory domains with a contiguous DNS namespace and transitive trusts.: Hierarchy of one or more Active Directory domains with a contiguous DNS namespace and transitive trusts.
  • Domain ControllerDomain ControllerServer running Active Directory Domain Services that replicates directory data and supports authentication and authorization for a domain.: Server running Active Directory Domain Services that replicates directory data and supports authentication and authorization for a domain.
  • Active Directory ObjectActive Directory ObjectActive Directory entry representing an identity, resource, or structure through an object class and associated attributes.: Active Directory entry representing an identity, resource, or structure through an object class and associated attributes.

Related terms