Learn about the fundamentals of Active Directory Domain Services (AD DS) in Windows Server, including forests, domains, sites, domain controllers, organizational units (OUs), users, and groups.


Contoso, Ltd. is a financial services company in Seattle with major offices located throughout the world. Most of its compute environment runs on-premises on Windows Server. This includes virtualized workloads on Windows Server 2016 hosts.

Contoso IT staff are migrating Contoso on-premises servers to Windows Server 2022. As part of the migration, Contoso is evaluating its current AD DS environment. As a Windows Server administrator, you’ll be responsible for managing AD DS objects, such as users, groups, and OUs.

After completing this module, you’ll understand the fundamental AD DS structure and how users, groups, and group managed service accounts, and how they relate to OUs.

Learning objectives

After completing this module, you'll be able to:

  • Describe AD DS.
  • Describe users, groups, and computers.
  • Identify and describe AD DS forests and domains.
  • Describe OUs.
  • Manage objects and their properties in AD DS.


To get the best learning experience from this module, you should have knowledge and experience of:

  • Windows Server.
  • Core networking technologies.