08. Overview of Active Directory

Overview of Active Directory for Windows

1. Active Directory (AD)
   
   • Core Components:
     
     • Domain Services (AD DS): Centralizes domain management and authenticates users and computers.
     • Lightweight Directory Services (AD LDS): Provides directory services for applications without requiring domains.
     • Certificate Services (AD CS): Manages public key infrastructure (PKI) for securing network communications.
     • Federation Services (AD FS): Enables single sign-on (SSO) across different organizations.
     • Rights Management Services (AD RMS): Protects sensitive information through encryption and access controls.
2. Key Features:
   
   • Group Policy: Allows administrators to manage policies for users and computers centrally.
   • Replication: Ensures data consistency across multiple domain controllers.
   • Authentication: Supports Kerberos, NTLM, and LDAP protocols for secure authentication.
   • Forest and Domain Structure: Provides hierarchical organization of resources, enabling flexible and scalable network management.

Overview of Active Directory on AWS

1. AWS Directory Service
   
   • Options:
     
     • AWS Managed Microsoft AD: A fully managed Microsoft Active Directory hosted on the AWS cloud.
     • AD Connector: Connects AWS services with an existing on-premises Active Directory.
     • Simple AD: A standalone managed directory compatible with a subset of AD features for smaller organizations.
2. Key Features:
   
   • Managed Service: AWS handles the maintenance and operation of the directory infrastructure, reducing the administrative burden.
   • Integration: Seamlessly integrates with other AWS services like Amazon WorkSpaces, Amazon RDS, and Amazon S3.
   • Security: Leverages AWS’s robust security framework, including encryption at rest and in transit, VPC integration, and AWS IAM for granular access control.
   • Scalability: Easily scales to accommodate growing numbers of users and devices without the need for additional hardware.