What exactly does a domain controller (AD) store?

Question

css

Good evening,
I am currently figuring out how to organize a network based on AD, and I have some questions.

1. The domain controller is used only to log users into the domain .. that is, it stores only information / data (login, password, groups) about domain users? If it's simpler .. then I don't quite understand what exactly can (or should) be stored in the LDAP database.

2. Is the installed software stored directly on the user's hard drive? That is, I won’t notice the difference at all when I use my installed software both when logging in to the domain and simply by logging into the system as a local user?

PS: I would be happy with the simplest example)

Answer 1

Answer 2

1. In a simplified form - yes.
2. Yes - on the hard drive of the workstation. But you will log in under different users - accordingly, the difference in authorization locally and in AD will be noticeable.

Answer 3

stores only information/data (login, password, groups) about domain users?

Not only about users. About domain computers. About other domain controllers. About other domains that this domain is associated with. In many cases, DNS zones are stored in the global AD directory.