22.10. Active Directory Administration Architecture

This section provides the architecture for the administration of Active Directory and thus the administration of the forest—the root domain and any future child domains.

A Windows Server 2008 domain is comprised of objects, the work they do, and the utility they provide to the domain. These objects are stored and administered to in Active Directory. Thus, access to and control over Active Directory objects—secured with permissions specifying authorized security principals (users and group accounts)—is what the network administrators are provided with to administer the domain.