How to: Setting up Active Directory
[Back to the Top](#table-of-contents)
Active Directory
*  **[Active Directory](https://learn.microsoft.com/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview)** is a directory service developed by Microsoft for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. 
 
 * **[Microsoft 365](https://www.microsoft.com/microsoft-365)** is a subscription that includes the most collaborative, up-to-date features in one seamless, integrated experience. It includes productivity tools such as Microsoft Word, Excel, PowerPoint, Microsoft Teams, Outlook, OneDrive, and more all in one place. 
 
 * **[Microsoft Entra ID (formerly Azure Active Directory)](https://learn.microsoft.com/entra/)** is a service that manages user identities and control access to your apps, data, and resources. It protects, monitors, and audits access to critical assets in your organization.
 
 * **[Active Directory Federation Services (AD FS)](https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/ad-fs-overview)** allows you can employ single sign-on to external systems such as applications and websites. One typical example of the use of AD FS is Office 365. When a user signs in to Office 365, the user ID and password are redirected via the federation server to check whether the entered credentials are authentic against your On-prem AD. This is how it provides authentication to external systems through the local Active Directory.

* **[Active Directory Lightweight Directory Services (AD LDS)](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831593(v=ws.11))** is a service that offers directory services with the help of LDAP protocol without having to deploy any DCs. The service is used to provide directory service functionally to directory-enabled applications. 

 * **[Active Directory Rights Management Services (AD RMS)](https://learn.microsoft.com/en-us/azure/information-protection/how-does-it-work)** is a service allows you to protect information within digital content. It secures the documents by defining which users can modify, open, view, print, forward, or take similar documents.

**Hierarchical Structure of Active Directory Domain Services**

 * **[Tree](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-tree-visualizations)** is formed by grouping one or more domains in a logical hierarchy. All domains within a tree are logically linked; hence they “trust” each other.
 * **[Forest](https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-forest)** is a topmost level in the Active Directory of your organization. It contains one or more trees grouped. Trees within a forest are also said to “trust” each other and share catalogs, directory schemas, domain configurations, and application data.
* **[Organizations Units (OU)](https://learn.microsoft.com/en-us/azure/active-directory-domain-services/create-ou)** are used to organize groups, users, computers, and other entities.
* **[Containers](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-default-containers-and-ous)**: is a tool similar to an OU; with the only difference is that you cannot link a GPO (Group Policy Object) to a generic container within AD.