Active Directory
Centralised Windows directory for authentication, authorisation and access control.
Active Directory is a centralised identity and domain services platform used to authenticate users and manage identities across Windows-centric estates. It stores accounts and groups, applies device and user policies, and underpins access to servers and line-of-business applications.
Operationally it introduces account sprawl, complex group nesting and delegation challenges. Teams must manage replication, availability, account lifecycle, backups and the interaction with cloud or federated identity systems.
Audit & Monitor Active Directory
Where Active Directory fits
It commonly acts as the authoritative source for user and device identities and integrates with application authentication, file servers and network services. It links to federation or cloud identity layers where single sign-on is required.
Because many systems rely on its groups and policies, changes affect access widely. Consider it when planning backups, disaster recovery, account lifecycle and control delegation across the estate.