> For the complete documentation index, see [llms.txt](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/active-directory-theory/logical-active-directory-components.md). # Logical Active Directory Components ### Schema * Defines every type of object that can be stored in the directory * Enforces rules regarding object creation and configuration * Think of it like a rule book or a blueprint

### Domains * Domains are used to group and manage objects in an organization * An administrative boundary for replicating data between domain controllers * An authentication and authorization boundary that provides a way to limit the scope of access to resources ### Trees * A domain tree is a hierarchy of domains in AD DS * Share a contiguous namespace within the parent domain * Can have additional child domains * By default create a two-way transitive trust with other domains

### Forests * A collection of one or more trees * Share a common name schema * Share a common configuration partition * Share a global catalog to enable searching * Enable trusts between all domains in the forest * Share the enterprise admins and schema admins groups

### Organizational Units * OUs are Active Directory containers that can contain users, groups, computers and other OUs * Represent a given organization hierarchically and logically * Manage a collection of objects in a consistent way * Delegate permissions to administer groups of objects