Active Directory is Microsoft's directory service for Windows environments. Provides authentication (Kerberos), authorization (groups/GPOs), and centralized management of users, computers, and policies.
Domain Controller (DC) hosts AD. Group Policy Objects (GPOs) enforce settings. AD is the #1 target in enterprise attacks — gaining Domain Admin = game over. Protect with tiered admin model.