Lesson 04 — Active Directory Fundamentals
Lesson 04 — Active Directory Fundamentals
Section titled “Lesson 04 — Active Directory Fundamentals”Lesson Overview
Section titled “Lesson Overview”Imagine a company with:
- 5,000 employees
- 3,000 laptops
- 500 servers
- Multiple office locations
- VPN users
- Cloud applications
Would an administrator manually create user accounts on every computer?
Would they configure passwords individually?
Would they manually install printers and map shared drives?
Absolutely not.
Instead, organizations use Microsoft Active Directory (AD DS).
Active Directory provides centralized identity management, authentication, authorization, policy enforcement, and device management across an entire organization.
Whether you’re a Windows Administrator, Cloud Engineer, Cybersecurity Professional, or SOC Analyst, understanding Active Directory is essential because nearly every enterprise Windows environment depends on it.
Learning Objectives
Section titled “Learning Objectives”After completing this lesson, you will be able to:
- Understand what Active Directory is.
- Learn the major Active Directory components.
- Understand Domains and Domain Controllers.
- Explore Organizational Units (OUs).
- Learn Group Policy basics.
- Understand authentication using Active Directory.
- Apply enterprise identity management concepts.
What is Active Directory?
Section titled “What is Active Directory?”Active Directory Domain Services (AD DS) is Microsoft’s centralized directory service.
It allows organizations to manage:
- Users
- Computers
- Servers
- Groups
- Printers
- Policies
- Authentication
- Authorization
Instead of configuring every computer individually, administrators manage everything from one centralized platform.
Why Active Directory Matters
Section titled “Why Active Directory Matters”Without Active Directory:
- Every computer would have separate user accounts.
- Password management would be difficult.
- Security policies would be inconsistent.
- User onboarding would take hours.
- IT administration would not scale.
Active Directory solves these challenges through centralized management.
Active Directory Architecture
Section titled “Active Directory Architecture”Users
↓
Domain Controller
↓
Authentication
↓
Authorization
↓
Applications
↓
Enterprise ResourcesThe Domain Controller acts as the central authority for identity and access management.
What is a Domain?
Section titled “What is a Domain?”A Domain is a logical collection of users, computers, groups, and resources managed together.
Example:
gohackerscloud.localor
corp.company.comAll devices joined to the domain trust the same authentication system.
Domain Controller (DC)
Section titled “Domain Controller (DC)”A Domain Controller is a Windows Server running Active Directory Domain Services.
Responsibilities include:
- Authenticate users
- Store directory information
- Manage Group Policies
- Process logon requests
- Replicate directory data
- Enforce security policies
The Domain Controller is the heart of Active Directory.
Active Directory Database
Section titled “Active Directory Database”Directory information is stored in:
NTDS.ditThe database contains:
- Users
- Groups
- Computers
- Password hashes
- Organizational Units
- Security information
Protecting this database is critical because it contains the organization’s identity information.
Forest
Section titled “Forest”A Forest is the highest-level container in Active Directory.
Example:
Forest
↓
gohackerscloud.com
↓
training.gohackerscloud.com
↓
labs.gohackerscloud.comA forest can contain one or more domains.
A Tree is a group of related domains that share a common namespace.
Example:
gohackerscloud.com
↓
india.gohackerscloud.com
↓
training.gohackerscloud.comOrganizational Units (OUs)
Section titled “Organizational Units (OUs)”An Organizational Unit (OU) is a logical container used to organize Active Directory objects.
Example:
GoHackersCloud
↓
IT
↓
HR
↓
Finance
↓
SalesAdministrators use OUs to delegate administration and apply Group Policies.
Active Directory Objects
Section titled “Active Directory Objects”Common Active Directory objects include:
- Users
- Groups
- Computers
- Printers
- Shared Folders
- Organizational Units
- Domain Controllers
Everything stored in Active Directory is an object.
User Accounts
Section titled “User Accounts”Instead of creating local accounts on every PC:
Domain User
↓
John
↓
Can Log In
↓
Laptop
↓
Desktop
↓
Terminal ServerOne account provides access across the enterprise.
Computer Accounts
Section titled “Computer Accounts”Every domain-joined computer receives its own account.
Example:
LAPTOP-001
SERVER-01
DC-01Computer accounts allow devices to authenticate securely with the domain.
Security Groups
Section titled “Security Groups”Groups simplify permission management.
Example:
Finance Team
↓
Read Finance Share
↓
Payroll Team
↓
Modify Payroll FolderPermissions are assigned to groups instead of individual users.
Group Policy (GPO)
Section titled “Group Policy (GPO)”Group Policy allows administrators to centrally configure Windows computers.
Examples:
- Password Policies
- Desktop Wallpaper
- USB Restrictions
- Firewall Settings
- Software Installation
- Windows Update
- Screen Lock Timeout
Thousands of computers can be configured automatically.
Group Policy Processing
Section titled “Group Policy Processing”Administrator Creates GPO
↓
Domain Controller
↓
Computers Refresh Policy
↓
Settings Applied AutomaticallyBy default, Group Policy refreshes periodically without administrator intervention.
Authentication Process
Section titled “Authentication Process”When a user logs in:
Username
↓
Password
↓
Domain Controller
↓
Verify Credentials
↓
Grant AccessThe Domain Controller validates the user’s identity before allowing access.
Kerberos Authentication
Section titled “Kerberos Authentication”Modern Active Directory uses Kerberos as its primary authentication protocol.
Benefits include:
- Mutual authentication
- Secure ticket-based authentication
- Reduced password transmission
- Improved security
Kerberos is widely used across enterprise Windows environments.
Active Directory uses LDAP (Lightweight Directory Access Protocol) to access directory information.
LDAP allows:
- User searches
- Group lookups
- Authentication requests
- Directory queries
Many enterprise applications integrate with Active Directory using LDAP.
DNS and Active Directory
Section titled “DNS and Active Directory”Active Directory depends heavily on DNS.
DNS helps:
- Locate Domain Controllers
- Resolve domain names
- Discover directory services
Without a properly functioning DNS infrastructure, Active Directory cannot operate correctly.
Active Directory Sites
Section titled “Active Directory Sites”Large organizations create Sites to represent physical office locations.
Example:
Mumbai
↓
Delhi
↓
Bengaluru
↓
HyderabadSites optimize authentication and directory replication across different locations.
Active Directory Replication
Section titled “Active Directory Replication”Organizations usually deploy multiple Domain Controllers.
Domain Controller 1
⇄
Domain Controller 2
⇄
Domain Controller 3Replication ensures directory information remains synchronized and provides redundancy if a controller becomes unavailable.
Active Directory in Cloud Computing
Section titled “Active Directory in Cloud Computing”Cloud platforms integrate with Active Directory.
Microsoft Azure
Section titled “Microsoft Azure”- Microsoft Entra ID
- Azure AD Domain Services
- Hybrid Identity
- Azure Virtual Desktop
- AWS Managed Microsoft AD
- Amazon EC2 Windows Servers
- IAM Identity Center integration
Hybrid identity is common in modern organizations.
Active Directory in Cybersecurity
Section titled “Active Directory in Cybersecurity”Security teams investigate:
- Failed logins
- Privileged groups
- Group Policy changes
- New user creation
- Domain Controller activity
- Kerberos attacks
- LDAP enumeration
Because Active Directory manages identities across the enterprise, it is a frequent target for attackers.
Useful Administrative Tools
Section titled “Useful Administrative Tools”Active Directory Users and Computers:
dsa.mscGroup Policy Management:
gpmc.mscActive Directory Administrative Center:
dsac.exePowerShell module:
Get-ADUser
Get-ADGroup
Get-ADComputer(Requires the Active Directory PowerShell module.)
Real-World Example
Section titled “Real-World Example”A new employee joins GoHackersCloud.
The IT administrator performs the following tasks:
Create User Account
↓
Add User to IT OU
↓
Assign Security Groups
↓
Apply Group Policy
↓
Issue Company Laptop
↓
Employee Logs In Anywhere
↓
Access Granted Based on RoleThis centralized approach allows administrators to manage thousands of users efficiently.
Best Practices
Section titled “Best Practices”As an Active Directory administrator:
- Organize users using Organizational Units (OUs).
- Use security groups for permission management.
- Follow the Principle of Least Privilege.
- Protect Domain Controllers.
- Regularly review privileged accounts.
- Back up Active Directory.
- Monitor Group Policy changes.
- Enable auditing for authentication events.
- Use Multi-Factor Authentication (MFA) for privileged accounts.
- Keep Domain Controllers fully patched.
Strong Active Directory management is fundamental to enterprise security.
Key Takeaways
Section titled “Key Takeaways”After completing this lesson, you should understand:
- Active Directory Domain Services (AD DS).
- Domains and Domain Controllers.
- Forests and Trees.
- Organizational Units (OUs).
- Active Directory objects.
- Group Policy.
- Kerberos authentication.
- LDAP.
- DNS integration.
- Enterprise identity management.
Summary
Section titled “Summary”Active Directory is the backbone of identity management in most enterprise Windows environments.
It centralizes authentication, authorization, policy management, and resource access, enabling organizations to securely manage thousands of users and devices from a single platform.
Mastering Active Directory is an essential milestone for Windows Administrators, Cloud Engineers, Cybersecurity Professionals, and anyone working in enterprise IT.
Next Lesson
Section titled “Next Lesson”➡️ Lesson 05 — Windows Services
In the next lesson, you’ll learn how Windows manages background services, explore the Service Control Manager (SCM), understand startup types, manage services using PowerShell and the Services console, and troubleshoot enterprise Windows services.