{"id":26478,"date":"2022-04-22T10:00:00","date_gmt":"2022-04-22T14:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=26478"},"modified":"2024-08-14T18:00:44","modified_gmt":"2024-08-14T22:00:44","slug":"ad-ds","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/ad-ds","title":{"rendered":"What Is Active Directory Domain Services?"},"content":{"rendered":"\n<p>Active Directory Domain Services (AD DS) is a crucial server role within <a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-faq\">Microsoft\u2019s Active Directory (AD)<\/a> platform that allows IT teams to manage and store information about enterprise resources. It helps IT teams organize resources (users, computers, devices) in a hierarchical containment structure that\u2019s usually sorted into departments or business units.<\/p>\n\n\n\n<p>Organizations can use AD DS to provide integrated security through single sign-on (SSO) and rights management for Windows networks. AD DS doesn\u2019t support cross-OS device management or web apps on its own. This post explains how AD DS works, its core services, the terms you need to know, and the risks that its legacy technology poses.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Check out <a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-faq\">The Ultimate AD FAQ<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading1\"><strong>What Is AD DS?<\/strong><\/h2>\n\n\n\n<p>AD DS is the main service in AD, which is a legacy <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-iam\">identity and access management (IAM)<\/a> solution within the Windows Server operating system (OS) environment. AD DS stores and manages information about users, services, and devices connected to the network into a tiered structure. AD DS allows IT teams to streamline IAM services by serving as a centralized point of administration for all the activities on a centralized private network.&nbsp;<\/p>\n\n\n\n<p>The servers that host AD DS are <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-a-domain-controller\">domain controllers (DCs)<\/a>. An organization can have multiple DCs, with each one storing a copy of the AD DS for the entire domain for high availability. AD DS also integrates with Azure hybrid services and Entra ID (formerly Azure AD), as well as non-Microsoft cloud directory platforms that can contain and modernize it.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/i_WalEVJ-Hc?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading2\"><strong>A Brief History of AD DS<\/strong><\/h2>\n\n\n\n<p>The modern IAM space kicked off with the introduction of <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\">lightweight directory access protocol (LDAP)<\/a>. Many directories later emerged in the IAM space, including email systems, internet white pages, and domain name systems (DNS). LDAP defined open standards.<\/p>\n\n\n\n<p>At the time, LDAP served as a basis for two major directory services solutions: Microsoft AD, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-openldap\">open source LDAP (OpenLDAP)<\/a>, and Novell NetWare. AD went on to become a commercial market leader, entrenching Microsoft into server rooms, while OpenLDAP became a popular open source market option. Microsoft was the overall \u201cwinner\u201d in business adoption.<\/p>\n\n\n\n<p>The main reason was that OpenLDAP strictly adhered to the LDAP standard, providing an affordable directory service for Unix and GNU\/Linux based systems. However, a lack of integration features, complexity, and need for customization limited its use.&nbsp;<\/p>\n\n\n\n<p>Microsoft extended and modified the protocol while adding support for business information systems. It also leveraged its extensive ecosystem and marketing prowess to promote AD, which quickly gained market share. Server hardware was also affordable and workers were on-site.<\/p>\n\n\n\n<p>Both solutions became underlying technologies for identity providers (IdPs) worldwide. The idea behind an IdP was to create a central user and data store for an organization. User accounts would then be stored within the IdP alongside IT resource information.<\/p>\n\n\n\n<p>These two sets of objects would then be interrelated to connect users to the IT resources that they needed, when they needed access. These resources, such as systems, applications, networks, and more, would each be tied directly to the user identities that needed them, as well as limited by the privileges of that specific user\u2019s role.<\/p>\n\n\n\n<p>In the case of AD DS, this was done largely for Windows networks and resources. The typical IT network at the time was virtually all Windows-based, so AD DS became very popular. A user could log in to their machine, and the AD DS would enable access to whatever the user needed and was authorized to.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading3\"><strong>How Does AD DS Work?<\/strong><\/h2>\n\n\n\n<p>AD DS relies on various standards and protocols, including LDAP, <a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/Kerberos\" target=\"_blank\" rel=\"noreferrer noopener\">Kerberos<\/a>, and DNS, to organize information into a hierarchy. This allows multiple domain services to connect with them while users access or manage them. The hierarchy includes the following components:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Domains&nbsp;<\/strong><\/h3>\n\n\n\n<p>An AD domain is a set of objects such as users, endpoints, or groups that share the same AD database. A domain can have multiple sub-domains, which can then have their own sub-domains. Authenticating users within the domain operates through a transitive trust relationship.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Trees<\/strong><\/h3>\n\n\n\n<p>A domain tree is a collection of one or more domains with a common namespace. For example, a subdomain, or branch of the same company.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Forest<\/strong><\/h3>\n\n\n\n<p>A collection of trees is called a forest, and can have different name spaces. For instance, a company might have acquired another with an entirely different domain. A forest is the highest-level logical container in any AD DS configuration and contains domains, devices, users, and group policies.&nbsp;<\/p>\n\n\n\n<p>Each forest shares one database security boundary and has a single global address list. By default, an IT administrator or user in one forest cannot access another forest.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Organization unit (OU)<\/strong><\/h3>\n\n\n\n<p>Organizational units are containers within AD for computers, groups, and users. It\u2019s the smallest unit to which IT teams can assign account permissions or group policy settings. Each organization unit can contain multiple OUs with it. However, all the attributes within the OU cannot have AD objects from other domains.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"227\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/1.png\" alt=\"\" class=\"wp-image-111393\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/1.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/1-300x133.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading4\"><strong>What Services Does AD DS Support?<\/strong><\/h2>\n\n\n\n<p>AD DS provides a range of services for enterprise IT environments.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Domain Services&nbsp;<\/strong><\/h3>\n\n\n\n<p>AD DS contains a centralized directory that lets domains and users communicate. For example, when users log in to Windows domain-based PCs, AD DS checks the submitted credentials and verifies whether they are IT administrators or regular users.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Lightweight Directory Services (LDS)<\/strong><\/h3>\n\n\n\n<p>Active Directory Lightweight Directory Services (AD LDS) is a standalone LDAP server that can provide a dedicated directory for applications and application data. It\u2019s usually installed on a server that\u2019s not a domain controller. It\u2019s similar to Domain Services. However, it leverages the LDAP that provides cross-platform capabilities. For example, IT teams can use AD LDS to enable Linux-based systems to function on an AD network.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Federation Services (FS)<\/strong><\/h3>\n\n\n\n<p>AD FS provides <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-single-sign-on-sso\">SSO authentication<\/a> capabilities. This allows users to sign in only once and access multiple services or applications in the same session.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Rights Management Services (RMS)<\/strong><\/h3>\n\n\n\n<p>AD RMS provides persistent data protection capabilities by enforcing access policies and rights management. For example, it determines which folders users can access in the AD domain.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Certificate Services (CS)<\/strong><\/h3>\n\n\n\n<p>Active Directory Certificate Services (AD CS) is a Windows Server role that must be set up and supported in order to issue and manage public key infrastructure (PKI) certificates (ports 2560, 9389). AD CS allows DCs to create and manage digital certificates, signatures, and asymmetric key cryptography. Users can leverage AD CS to encrypt and digitally sign electronic documents. However, it\u2019s been associated with <a href=\"https:\/\/www.secureideas.com\/blog\/understanding-and-mitigating-exploitation-risks-in-active-directory-certificate-services-ad-cs\" target=\"_blank\" rel=\"noreferrer noopener\">serious security risks<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Note:<\/strong> Microsoft has added cloud PKI to its Intune suite, which may foretell a potential end to this on-premises service.<\/p><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading5\"><strong>A Legacy System<\/strong><\/h2>\n\n\n\n<p>AD leaves security gaps and lacks controls that could prevent attacks. You\u2019ll have to spend more to prop up AD in order to keep your identities safe. At least one industry expert has also raised concerns about Microsoft monetizing security and \u201cabusing the term legacy\u201d to sell more products versus fixing its issues.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>A recent <a href=\"https:\/\/www.darkreading.com\/ics-ot-security\/critical-windows-kerberos-bug-microsoft-security-bypass\" target=\"_blank\" rel=\"noreferrer noopener\">Kerberos bypass vulnerability<\/a> made it possible to launch impersonation attacks. The answer was to patch quickly, which isn\u2019t always realistic. Only Microsoft\u2019s Defender for Identity service, which is a separate cost from Microsoft 365 packages, could detect the attack.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Those solutions are rarely consumed a la carte; customers purchase Microsoft 365 bundles, such as its <a href=\"https:\/\/jumpcloud.com\/blog\/is-e3-right-for-you\">E3 SKU<\/a>. E3 bundles many products at one price and seems like a great bargain.&nbsp;<\/p>\n\n\n\n<p>Reality sets in once admins recognize that its vast, vertically integrated suites of tools with apps for \u201ceverything\u201d are a mismatch for their organization and limits their flexibility. The cost of licensing, implementing, integrating services, and training admins and users can be significant. You\u2019ll pay to prop up AD, but you could still be at risk of identity theft.<\/p>\n\n\n\n<p>Keeping your IdP independent and isolated can help to mitigate the risks.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Check out <a href=\"https:\/\/jumpcloud.com\/blog\/the-active-directory-to-cloud-translation-guide\">The Active Directory to Cloud Translation Guide<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading6\">JumpCloud Directory: A Modern Alternative to AD DS<\/h2>\n\n\n\n<p>While AD has dominated the IAM market for some time, it is struggling to keep up with today\u2019s fast-paced and ever-changing IT environment. Since the mid-2000s, the IT space has seen companies adopt heterogeneous devices under the <a href=\"https:\/\/jumpcloud.com\/blog\/byod-security\">bring-your-own-device (BYOD) framework<\/a> and support OSs like Linux and macOS, as well as mobile OSs like Android, iOS, and iPadOS.<\/p>\n\n\n\n<p>These components introduce new access requirements, creating a hassle for IT teams to maintain security, compliance, and IT efficiency. This is largely because AD focuses on Windows environments. Besides heterogeneous IT environments, virtually all organizations are embracing cloud-based solutions. Such a cloud-forward status presents a significant challenge to organizations grounded on-prem with AD DS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>What Can JumpCloud Do for My AD Infrastructure?<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"311\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/2.png\" alt=\"infrastructure\" class=\"wp-image-111394\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/2.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/04\/2-300x182.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Let\u2019s get down to brass tax: how and where can you use JumpCloud?<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Where Can JumpCloud Eliminate AD?<\/strong><\/h3>\n\n\n\n<p>Most organizations can migrate to a modern cloud directory to allow them to take advantage of the cloud, efficiency, and security.<\/p>\n\n\n\n<ul>\n<li>Domain-bound Windows devices and unbound cross-OS device types&nbsp;<\/li>\n\n\n\n<li>Windows servers including Windows File Servers<\/li>\n\n\n\n<li>M365, Azure resources, and on-device Office installations<\/li>\n\n\n\n<li>Third-party Windows applications using open standards (OIDC, SAML, LDAP, etc.)<\/li>\n\n\n\n<li>Multiple domains, multiple forests, multiple OUs<\/li>\n\n\n\n<li>Multi-organization trust situations, flattening security groups and OUs<\/li>\n<\/ul>\n\n\n\n<p>Active Directory Integration (ADI) and Migration Utility tools help to migrate identities away from AD. ADI supports multiple workflows, providing flexibility while keeping necessary services for DHCP, DNS, faxing, file sharing, printing, virtualization, and more.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Where Can JumpCloud Contain AD?<\/strong><\/h3>\n\n\n\n<p>Only enterprises with custom, homegrown applications will not be able to fully migrate. A containment strategy where these apps and AD become ring-fenced is implemented.<\/p>\n\n\n\n<ul>\n<li>Legacy and custom applications that can\u2019t update to modern auth protocols<\/li>\n\n\n\n<li>Highly customized AD schema and SharePoint workflows&nbsp;<\/li>\n\n\n\n<li>Certificate-based auth for network access<\/li>\n\n\n\n<li>Some multi-organization forest trust situations<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Sign Up for a JumpCloud Demo<\/strong><\/h2>\n\n\n\n<p>If you\u2019d like to learn more about a better alternative to Active Directory, please <a href=\"https:\/\/jumpcloud.com\/contact\" target=\"_blank\" rel=\"noreferrer noopener\">reach out<\/a> to us. <a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">Try JumpCloud for free<\/a> and find out if it\u2019s the right option for your organization\u2019s journey away from AD.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Google, a JumpCloud partner, recommends the <a href=\"https:\/\/jumpcloud.com\/blog\/jumpcloud-google-workspace-partnership\">open directory platform<\/a> for small and midsize enterprises (SMEs) to modernize AD.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management. <\/p>\n","protected":false},"author":150,"featured_media":14723,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2781],"tags":[],"collection":[2777],"platform":[],"funnel_stage":[3016],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What Is Active Directory Domain Services (AD DS)?<\/title>\n<meta name=\"description\" content=\"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/ad-ds\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is Active Directory Domain Services?\" \/>\n<meta property=\"og:description\" content=\"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/ad-ds\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-22T14:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-14T22:00:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png\" \/>\n\t<meta property=\"og:image:width\" content=\"323\" \/>\n\t<meta property=\"og:image:height\" content=\"289\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"What Is Active Directory Domain Services?\",\"datePublished\":\"2022-04-22T14:00:00+00:00\",\"dateModified\":\"2024-08-14T22:00:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds\"},\"wordCount\":1705,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png\",\"articleSection\":[\"How-To\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds\",\"url\":\"https:\/\/jumpcloud.com\/blog\/ad-ds\",\"name\":\"What Is Active Directory Domain Services (AD DS)?\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png\",\"datePublished\":\"2022-04-22T14:00:00+00:00\",\"dateModified\":\"2024-08-14T22:00:44+00:00\",\"description\":\"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/ad-ds\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png\",\"width\":323,\"height\":289,\"caption\":\"Active Directory\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ad-ds#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is Active Directory Domain Services?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What Is Active Directory Domain Services (AD DS)?","description":"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/ad-ds","og_locale":"en_US","og_type":"article","og_title":"What Is Active Directory Domain Services?","og_description":"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.","og_url":"https:\/\/jumpcloud.com\/blog\/ad-ds","og_site_name":"JumpCloud","article_published_time":"2022-04-22T14:00:00+00:00","article_modified_time":"2024-08-14T22:00:44+00:00","og_image":[{"width":323,"height":289,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png","type":"image\/png"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"What Is Active Directory Domain Services?","datePublished":"2022-04-22T14:00:00+00:00","dateModified":"2024-08-14T22:00:44+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds"},"wordCount":1705,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png","articleSection":["How-To"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/ad-ds","url":"https:\/\/jumpcloud.com\/blog\/ad-ds","name":"What Is Active Directory Domain Services (AD DS)?","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png","datePublished":"2022-04-22T14:00:00+00:00","dateModified":"2024-08-14T22:00:44+00:00","description":"Learn about Active Directory Domain Services (AD DS), how it works, and how JumpCloud Directory\u00ae can help you transition from an on-prem to fully optimized cloud-based identity management.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/ad-ds"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/active-directory-had-it-figured-out.png","width":323,"height":289,"caption":"Active Directory"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/ad-ds#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"What Is Active Directory Domain Services?"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/26478"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=26478"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/26478\/revisions"}],"predecessor-version":[{"id":114007,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/26478\/revisions\/114007"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/14723"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=26478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=26478"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=26478"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=26478"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=26478"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=26478"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=26478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}