Hacck3y

Active Directory Basics

Introduction to Active Directory concepts

Active Directory Basics

Active Directory (AD) is Microsoft's directory service for Windows domain networks.

What is Active Directory?

AD provides:

  • Centralized authentication - Single sign-on for users
  • Authorization - Access control to resources
  • Directory services - Organized database of network objects

Key Components

Domain

A logical group of network objects (computers, users, devices) that share the same AD database.

Domain Controller (DC)

Server that runs AD Domain Services. Handles:

  • Authentication requests
  • Stores AD database
  • Replicates changes to other DCs

Organizational Units (OUs)

Containers for organizing objects within a domain. Used for:

  • Applying Group Policies
  • Delegating administrative control

Forest & Trees

Forest (contoso.com)
├── Tree 1: contoso.com
│   ├── us.contoso.com
│   └── eu.contoso.com
└── Tree 2: subsidiary.local

Common AD Objects

ObjectDescription
UserIndividual account
ComputerMachine joined to domain
GroupCollection of users/computers
GPOGroup Policy Object

Key Ports

PortProtocolService
389TCP/UDPLDAP
636TCPLDAPS
88TCP/UDPKerberos
445TCPSMB
3268TCPGlobal Catalog

More AD deep-dives coming soon! 🖥️

On this page