A Windows-based directory service.
Active Directory stores information about objects on a network and makes this information usable to users and network administrators. Active Directory gives network users access to permitted resources anywhere on the network using a single logon process. It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration for all network objects.
DOMAIN
A domain is a collection of computer, user, and group objects defined by the administrator. These objects share a common directory database, security policies, and security relationships with other domains.
FOREST
One or more Active Directory domains that share the same class and attribute definitions (schema), site, and replication information (configuration), and forest wide search capabilities (global catalog). Domains in the same forest are linked with two-way, transitive trust relationships.
ORGANIZATIONAL UNIT(OU)
An Active Directory container object used within domains. An OU is a logical container into which users, groups, computers, and other OUs are placed. It can contain objects only from its parent domain. An OU is the smallest scope to which a GPO can be linked, or over which administrative authority can be delegated.
SITE
One or more well connected (highly reliable and fast) TCP/IP subnets. A site allows administrators to configure Active Directory access and replication topology to take advantage of the physical network.
Related posts: