# LDAP

## Active Directory Directory Services

[good link](https://www.youtube.com/watch?v=lFwek_OuYZ8)

* Domain controller
  * user account
  * computer account
  * schema
  * group
  * OU Organisational unit

* Domain

  * subdomain
    * bidirectional trust (accounts from both domain and subdomain may be used in groups)
  * subdomain
    * bidirectional trust

* Domain with subdomains is a tree

* Several joined domains is a forest
  * if you join domains you may define a uni directional trust (accounts only from one domain may access resources from another domain)

## LDAP

Lightweight Directory Access Protocol
