Active Directory (AD) acts like a central directory for users, computers and resources in a Windows domain, handling authentication, authorization and group membership.
AD is the hub of Windows domains - a directory service that stores identities, machines, servers, groups and access policies in one place. AD relies on protocols such as LDAP, Kerberos and DNS to validate who you are, what you may do, and how resources are organized. Concepts like forests, trees and domains provide a scalable, hierarchical model that can mirror an organization's structure.
The platform includes several roles, the most central being AD DS (Domain Services), which manages authentication and the directory database. There are also complementary services like AD FS (for single sign-on and federation), AD CS (certificate services), AD RMS (rights management) and AD LDS (a lightweight directory for applications). Together they form a comprehensive identity and access management solution for both on-premises and cloud scenarios.