Editing Active Directory (section)

===Domain Services===
Active Directory Domain Services (AD DS) is the foundation of every [[Windows domain]] network. It stores information about domain members, including devices and users, [[Authentication|verifies their credentials]], and [[Authorization|defines their access rights]]. The server running this service is called a [[domain controller]]. A domain controller is contacted when a user logs into a device, accesses another device across the network, or runs a line-of-business [[Metro-style app]] [[Sideloading|sideloaded]] into a machine.

Other Active Directory services (excluding [[#ADAM|LDS]], as described below) and most Microsoft server technologies rely on or use Domain Services; examples include [[Group Policy]], [[Encrypting File System]], [[BitLocker]], [[Domain Name Services]], [[Remote Desktop Services]], [[Exchange Server]], and [[SharePoint Server]].

The self-managed Active Directory DS must be distinct from managed [[Microsoft Azure Active Directory|Azure AD DS]], a cloud product.<ref>{{Cite web |title=Compare Active Directory-based services in Azure |url=https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-identity-solutions |website=docs.microsoft.com|date=3 April 2023 }}</ref>