What Are AD DS Domains?

AD DS domain is a logical grouping of users, For the purpose of the computer, and group objects Management and security. Everything In AD DS database storage, and a copy of The database is stored in each domain AD DS domain controller. There are several types of objects can be Stored in the AD DS database, including user account. It provides a mechanism for a user account you can use it to authenticate, then It allows users to access resources the internet. Each computer must be joined to the domain In AD DS account. It allows domain Administrators can use to manage the computer in the domain -defined rules. The field also Storage group, which is something that the executive or security mechanisms grouped together Reason - for example, user accounts and computer accounts. 

AD DS is also a copy of the domain boundary. When you change any of the objects in the domain, Changes automatically replicated to all other domain controllers in the domain. 

AD DS domain is the administrative center. It contains a domain administrator account and Admin group; they have full control over the domain over each object. Unless they are in the forest Root domain, however, their scope is limited to the control domain. Password and account policies by default, the domain level management. AD DS domain provides a certification center. All users Domain and computer accounts in the domain are stored in the database, and user and the computer must be connected to a domain controller for authentication. 

Single domain can contain more than one million objects; most organizations need to deploy only a single domain. Decentralized organizational structure, or distributed in multiple locations, but it can be implemented in the same multiple domains in the forest.