Active directory question begginer

Hi @Vinc Mouss

1) A Domain by definition is:

An Active Directory domain is a collection of objects within a Microsoft Active Directory network. An object can be a single user or a group or it can be a hardware component, such as a computer or printer. Each domain holds a database containing object identity information.

Cited from https://www.techtarget.com/searchwindowsserver/definition/Active-Directory-domain-AD-domain#:~:text=An%20Active%20Directory%20domain%20is,database%20containing%20object%20identity%20information.

2) The CN is:

In Active Directory the acronym "cn" only stands for "Common Name". But there is a canonicalName attribute in Active Directory, which is different from the CNAME in DNS.

Cited from https://social.technet.microsoft.com/Forums/ie/en-US/bacb9ca7-0c16-457d-85dc-439a6f9adb4d/what-does-quotcnquot-stand-for?forum=winserverDS#:~:text=In%20Active%20Directory%20the%20acronym,from%20the%20CNAME%20in%20DNS.

Example 2 would be correct if you are using OU and not "or". If a user is located under kira.net (domain) > Users (OU) then their Distinguished Name (DN) would be:

CN=Patrick,OU=Users,DC=Kira,DC=net

3) You can have it all under the same domain (kira.net). You can separate this by having different OUs (Organizational Units) for the locations:

kira.net (domain) > Users (OU) > Paris (OU)

AND

kira.net (domain) > Users (OU) > New York (OU)

Note: OUs are not used in Azure AD (AAD/365/Cloud), so when you are architecting your environment be aware of this if you will be using Microsoft Azure (Cloud).

-------------------------------------

If this is helpful please accept answer.

Something here could help.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/assigning-domain-names

--please don't forget to upvote and Accept as answer if the reply is helpful--

Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Active Directory serves as a central location for network administration and security. Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Active Directory serves as a central location for network administration and security.