A live directory service which functions similarly to a Windows Domain in the fact that it:

  • Stores domain user login credentials It expounds on this by also storing:
  • Printer information
  • Computer names
  • Location information
  • Group policies
  • Encryption keys Active directory is powered by LDAP on TCP port 389

Active Directory Users and Computers

The active directory can be configured here.

  • Built-in: All domain groups are stored like users and administrators
  • Computers: All systems in the network
  • Domain Controllers: Usually just 1 which is the Active Directory server
  • Users: All added users into the domain. Group policies created here will supersede Windows Local Security Policy.

Removing User

Active Directory > Right click on the correct system > Properties > Member Of > Remove user

User Properties

In the Users tab, right clicking the properties of a User, you can:

  • Create Visual Basic scripts to run at login
  • Set home folders like Documents, Downloads, etc
  • Redirect home folder locations to that found on the server, so that when the user logs in to a new computer, they will still have their old files

Concepts