~/moritzsamrock_

Domain Controller

Also known as:DC

Domain Controller: A server providing Active Directory Domain Services for a domain. It processes Kerberos and LDAP requests, maintains a replicated directory database, and distributes policy data through SYSVOL. Because of credential material, trust relationships, and extensive modification capability, domain controllers are among the most sensitive systems in an AD environment.

How it works and where it fits

Domain Controller denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

  • Active Directory DomainActive Directory DomainLogical Active Directory partition with a shared directory database, namespace, policies, and domain controllers.: Logical Active Directory partition with a shared directory database, namespace, policies, and domain controllers.
  • Active Directory-Integrated DNSActive Directory-Integrated DNSDNS zone model in which zone data is stored in Active Directory, replicated, and protected through AD permissions.: DNS zone model in which zone data is stored in Active Directory, replicated, and protected through AD permissions.
  • SYSVOLSYSVOLReplicated domain-controller directory containing Group Policy files, logon scripts, and other domain-wide content.: Replicated domain-controller directory containing Group Policy files, logon scripts, and other domain-wide content.
  • FSMO RolesFSMO RolesFive Active Directory operations-master roles for tasks that cannot safely be performed concurrently on multiple domain controllers.: Five Active Directory operations-master roles for tasks that cannot safely be performed concurrently on multiple domain controllers.

Related terms