LDAP

Active Directory Directory Services

good link

• Domain controller

  • user account

  • computer account

  • schema

  • group

  • OU Organisational unit

• Domain

  • subdomain

    • bidirectional trust (accounts from both domain and subdomain may be used in groups)

  • subdomain

    • bidirectional trust

• Domain with subdomains is a tree

• Several joined domains is a forest

  • if you join domains you may define a uni directional trust (accounts only from one domain may access resources from another domain)

LDAP

Lightweight Directory Access Protocol