In the previous sections in this chapter, I explained what Active Directory and its components are. As a recap, I would like to list down some key points about AD DS:

• AD DS can manage an organization's resources in a secure, efficient manner, and it helps organize objects in a hierarchical structure.
• The Active Directory forest is an identity infrastructure security boundary and the forest can contain multiple domains with their own directory partitions.
• The Active Directory domain maintains a multi-master database to store data about objects and replicate it with other domain controllers in the domain. Any writable domain controller in the domain can add, modify, or delete objects from the Active Directory database, and other domain controllers will be aware of these changes.
• The organizational unit will be used to arrange objects in Active Directory in a hierarchical structure. It is also used to delegate permissions for administrative tasks.