Microsoft Active Directory

Contents

Microsoft Active Directory is a directory service developed by Microsoft for Windows Server that centralizes identity and resource management across enterprise networks. It integrates with Windows NT, Windows Server 2008, Windows Server 2016, Windows Server 2019, Windows Server 2022 and interoperates with Linux, macOS, Solaris, IBM AIX systems through protocols and connectors. Active Directory is used by organizations such as General Electric, Bank of America, Walmart, Boeing, NASA to manage users, devices, policies, and applications at scale.

Overview

Active Directory provides a hierarchical database and set of services that enable administrators from Information Technology teams in enterprises like Accenture, Deloitte, Microsoft Corporation, IBM to manage identities, resources, and policies, and supports protocols from standards bodies such as the Internet Engineering Task Force, World Wide Web Consortium, International Organization for Standardization, and Organization for the Advancement of Structured Information Standards. It centralizes authentication and authorization for users associated with organizations like Amazon (company), Google, Facebook, Intel, Cisco Systems and supports management tools used by teams familiar with products from VMware, Citrix Systems, Red Hat, and Canonical (company).

The Active Directory architecture is a multi-master, replicated directory rooted in domains, trees, and forests used by enterprises like Siemens, Siemens AG, Toyota Motor Corporation, Ford Motor Company to model organizational boundaries, and relies on protocols including Lightweight Directory Access Protocol, Kerberos (protocol), DNS, and LDAP. Logical structures such as domain controllers, global catalog servers, and organizational units mirror administrative delegation seen in institutions like United Nations, European Commission, World Bank, and replication and site topology map to network designs used by AT&T, Verizon Communications, Deutsche Telekom.

Key components include the directory database (NTDS.dit), domain controllers, global catalog, schema, and roles like the Flexible Single Master Operations held by servers often compared with role assignments in International Monetary Fund, Federal Reserve System, World Health Organization, European Central Bank. Services extend to Group Policy for configuration management used by enterprises such as Procter & Gamble, Unilever, Johnson & Johnson, and authentication services that interoperate with Microsoft Exchange Server, SharePoint, Skype for Business, SQL Server and identity providers from Okta, Ping Identity, Auth0.

Deployment patterns include single-domain forests, multi-domain forests, and resource forests used in enterprise mergers involving Siemens, Alstom, Berkshire Hathaway, and enterprises leverage management consoles and tools from Microsoft System Center, PowerShell, Windows Admin Center, and third-party offerings by SolarWinds, ManageEngine, Quest Software. Administrative delegation, site topology, and replication schedules are planned alongside network infrastructure provided by vendors like Cisco Systems, Juniper Networks, Arista Networks, and storage and backup solutions from Dell Technologies, Hewlett Packard Enterprise, NetApp are commonly integrated.

Authentication in Active Directory uses Kerberos (protocol) as the primary protocol with NTLM fallback, and supports multi-factor authentication with providers such as Duo Security, Yubico, RSA Security and integrates conditional access policies inspired by frameworks from NIST, ISO/IEC 27001, CIS (Center for Internet Security). Security features include role-based access control, fine-grained password policies, and auditing that organizations monitor using systems from Splunk, IBM QRadar, McAfee, while incident response teams coordinate with standards used by CERT Coordination Center, US-CERT, ENISA.

Active Directory integrates and federates identities using Active Directory Federation Services, SAML, OAuth, and OpenID Connect to connect with cloud platforms such as Microsoft Azure, Amazon Web Services, Google Cloud Platform, and SaaS vendors like Salesforce, ServiceNow, Workday. Hybrid identity scenarios are implemented with tools like Azure AD Connect, third-party identity brokers from Ping Identity and Okta, and interoperability with enterprise applications from SAP SE, Oracle Corporation, Adobe Inc..

Active Directory was introduced with Windows 2000 and evolved through major server releases including Windows Server 2003, Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019, and Windows Server 2022, with each release adding features adopted by customers such as Goldman Sachs, Morgan Stanley, HSBC, Citigroup. Historical developments intersected with standards work from IETF and security incidents that involved responses from organizations like US-CERT, FBI, European Union Agency for Cybersecurity (ENISA), prompting best-practice guidance from consultancies including McKinsey & Company and Boston Consulting Group.

Category:Identity management