Active Directory Domain Services (AD DS) are the core functions in Active Directory that manage users and computers and allow sysadmins to organize the data into logical hierarchies.

AD DS provides for security certificates, Single Sign-On (SSO), LDAP, and rights management.

Understanding AD DS is a top priority for Incident Response (IR) and cybersecurity practitioners because all cyberattacks will affect AD, and you need to know what to look for and how to respond to attacks when they happen.

There are several benefits to using AD DS for your basic network user and computer management.

  • You can customize how your data is organized to meet your companies needs
  • You can manage AD DS from any computer on the network, if necessary
  • AD DS provides built in replication and redundancy: if one Domain Controller (DC) fails, another DC picks up the load
  • All access to network resources goes through AD DS, which keeps network access rights management centralized