Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm quite new to this so I'm trying to figure out the reason for ActiveDirectory existing in the first place.

share|improve this question
up vote 7 down vote accepted

The main benefit of active directory is centralized management. It allows you to do things like

  • Centralized account and password management - users have accounts that work on all machines in the domain, when changes are made they work throughout the whole organisation. On a standard Windows Work group, to reset a password, you would need to do this on every machine where an account for this user existed. It also means accounts can be disabled centrally if a user leaves the organisation.
  • Centralized computer management
  • Group policy - Apply User and Machine policy's to control what user can and can't do.
  • Rolling out software to machines on the domain
  • Provides a central directory of all users in an organisation, including contact information if required

These are some of the very basic benefits of AD. There is much more it can do. If you want to find out more, I suggest you take a look at this page.

share|improve this answer
I would bold, underscore, italicize and capitalize Group Policy! – MDMarra Mar 24 '10 at 14:46
Yeah, central management is not to be underestimated - but then, the poster possibly has never seen the administration nightmare a large installation can be. – TomTom Mar 24 '10 at 14:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.