Active Directory is a database of Users and computers that makes up an internal domain.Users are created and administered by IT staff . Users are given usernames and passwords that allows them to authenticate against any pc within the said domain.
Users can also be categorised into groups which can later be used to be granted permissions within a file server or other Microsoft related software that allows the import of security groups which can then be used to grant access permissions.
The highest permissions are domain admins which are generally the only people that can log onto the Active Directory server. This role is generally assigned to IT admins only.
Thanks for reading.
Regards,
