Back

Understanding Active Directory - All Seven Types (Video)

In this Tech Talk Conrad Agramont Agile IT CEO discusses the seven types of Active Directory what to use them for and how they can be used togeth...

3 min read
Published on Mar 5, 2020
Understanding Active Directory - All Seven Types (Video)

In this Tech Talk, Conrad Agramont, Agile IT CEO, discusses the seven types of Active Directory, what to use them for, and how they can be used together to deliver solutions. Check out our earlier articles and tech talks on Active Directory:

Understanding Active Directory Licensing P1 and P2

Active Directory Health Checks  

The Shared Responsibility Model

ResponsibilityOn-PremIaaSPaaSSaaS
ApplicationsCustomerCustomerCustomerProvider
DataCustomerCustomerCustomerProvider
MiddlewareCustomerCustomerProviderProvider
NetworkingCustomerProviderProviderProvider
O/SCustomerCustomerProviderProvider
RuntimeCustomerCustomerProviderProvider
ServersCustomerProviderProviderProvider
StorageCustomerProviderProviderProvider
VirtualizationCustomerProviderProviderProvider

What is Active Directory?

Active Directory (AD), introduced in 1999 as part of Windows Server 2000, is a directory service based on Lightweight Directory Access Protocol (LDAP). AD is responsible for authenticating and authorizing all users and computers in a windows domain network.

  • People
    • Names
    • Numbers
    • Address
  • Services
    • Category
    • Names
    • Numbers
    • Address
    • Advertisement

The Types of Active Directories

There are technically 7 different types of Active Directory. Each of them are deployed in different way, places and for different purposes.

Active Directory TypeDeploymentModern?Purpose
Active Directory Federation Services (ADFS)ServerNoSingle Sign On (SSO) For Ad
Azure Active DirectoryCloudYesCloud Identity
Azure Active Directory Application ProxyCloudYesAzure AD enable legacy apps
Azure Active Directory ConnectServer-Sync AD and AAD
Azure Active Directory Connect Cloud ProvisioningServerYesSync AD and AAD (Limited)
Azure Active Directory Domain ServicesCloudYesCloud Hybrid Servers
Local AD (AD)ServerNoLocal Identity

Identity is Your Control Plane

Active Directory Control Plane

What is Local Active Directory (AD)

Purpose

  • Centralized administration for servers, workstations, users, and applications
  • Services (e.g. Exchange) can leverage for email services configuration

Deployment

  • Windows Server OS
  • Active Directory Domain Controllers

Limitations

  • Requires direct network connection
  • Reliance on customer managed networking: DNS, VPN, and Servers (Physical and Virtual)

What is Azure Active Directory (AAD)

Purpose

  • Centralized administration for cloud services
  • Services (e.g. Exchange) can leverage for email services configuration
  • Hybrid scenarios supported via Azure AD Connect connecting to local Active Directory
    • Use your corporate credentials/passwords

Deployment

  • Cloud Service

Limitations

  • Lack of IT protection without AAD P1 and P2 licensing
  • Device bases security requires EM+S licensing for Intune

What is Azure AD Connect Cloud Provisioning?

What is Azure Active Directory Domain Services (AADDS)

Purpose

  • Local Active Directory (Fully compatible with Windows Server Active Directory)
  • Lift and Shift scenarios for Windows servers
    • Use your corporate credentials/passwords
    • NTLM and Kerberos authentication
  • Co-mingle local Active Directory users and Azure Active Directory users

Deployment

  • Cloud Service (Two domain controllers are available by IP only)
  • Highly available domain
  • Auto-remediation
  • Automatic backups

Limitations

  • Organizational Units are flat and not brought over from local AD/AAD
  • Not recommended for workstations
  • Administrators are NOT Domain Admins (it’s also a good thing)

Synced Tenants

What is Azure AD Application Proxy

Azure AD Application Proxy

Purpose

  • Publish on-premises web apps externally in a simplified way without a DMZ
  • Support single sign-on (SSO) across devices, resources, and apps in the cloud and on-premises
  • Support multi-factor authentication for apps in the cloud and on-premises deployment

Deployment

  • Requires Azure AD basic or premium (P1 or P2) subscription
  • Support Authentication: Integrated Windows Authentication (IWA), Header-based, forms, password-based SAML

Limitations

  • Connector must be installed on Windows Server 2102 R2 or higher, Windows 8.1 or higher
  • The on-premises firewall must be enabled for outbound traffic from the connector

Up Next? Getting Rid of Your Local Active Directory

As more and more organizations move more and more of their operations to the cloud, Local Active Directories are becoming redundant, and sometimes challenging pieces of infrastructure.  Last year, Agile IT took the leap, and removed our own Local Active Directory, and since then, have helped dozens of companies do the same. Conrad will be discussing the dangers, challenges and benefits to removing your own local active directory in an upcoming Tech Talk.

This post has matured and its content may no longer be relevant beyond historical reference. To see the most current information on a given topic, click on the associated category or tag.

Related Posts

Top CMMC Assessment Checklist Resources

Top 7 CMMC Assessment Checklist Resources

Explore the top CMMC assessment checklist resources to prepare for compliance. Learn what tools, templates, and guides can streamline your certification journey.

Aug 28, 2025
6 min read
Cloud Backup Solutions for Microsoft 365 | Benefits & Protection

Benefits of Implementing Cloud Backup Solutions for Microsoft 365

Learn the key benefits of cloud backup for Microsoft 365, including enhanced data protection, compliance support, and recovery from cyber threats.

Aug 27, 2025
6 min read
CMMC Level 3 Security Controls: Understanding NIST 800-172

Understanding NIST 800-172 Enhanced Security Controls for CMMC Level 3

Learn how NIST 800-172 enhances CMMC Level 3 compliance with advanced security controls for protecting CUI against sophisticated cyber threats.

Aug 27, 2025
7 min read
Standard Form SF-XX: A Contractor’s Guide to FAR Compliance

Standard Form SF-XX in FAR Contracts: What Contractors Need to Know

Understand the role of Standard Form SF-XX in FAR contracts. Learn how to complete it, key compliance requirements, and why it matters for government contractors.

Aug 25, 2025
6 min read
Why Hire an MSP to Manage CUI Compliance

Why Hire an MSP to Manage CUI Compliance?

Discover how hiring an MSP to manage CUI compliance streamlines security, meets DFARS and NIST 800-171 requirements, and reduces internal IT burden.

Aug 23, 2025
9 min read
What is FAR CUI and How Does It Affect Contractors?

The FAR CUI: What It Means for Contractors and How to Stay Compliant

Learn about the FAR CUI, its security requirements, and how it impacts federal contractors. Understand the key compliance measures and steps to align with Federal Acquisition Regulation (FAR) guidelines.

Aug 22, 2025
8 min read

Ready to Secure and Defend Your Data
So Your Business Can Thrive?

Fill out the form to see how we can protect your data and help your business grow.

Loading...
Secure. Defend. Thrive.

Let's start a conversation

Discover more about Agile IT's range of services by reaching out.

Don't want to wait for us to get back to you?

Schedule a Free Consultation

Location

Agile IT Headquarters
4660 La Jolla Village Drive #100
San Diego, CA 92122

Secure. Defend. Thrive.

Don't want to wait for us to get back to you?

Discover more about Agile IT's range of services by reaching out

Schedule a Free Consultation