This question already has an answer here:
In short: I do not know where to start reading so that I can understand how to configure a DC.
The long question:
In the environment I work, we use an outdated domain controller and I have to create a new one. The problem is that I can not yet grasp the idea of the Domain Controller. The one we use is actually used just for authenticating users (single domain, no one else in the forest, no other forest).
The theory I (think) know in short is:
- An active directory is a database that stores information about computers and users.
- A domain controller is a server that holds the active directory and maybe other services such as DNS.
- A windows server can be a domain controller if it has active directory.
- I can restrict users from using a printer for example.
- I can change the settings for a given user account (let's say desktop background?)
What I can not grasp is generally the big picture, but specifically:
- Why are there users and computers and not just users, what can I do with each of them.
- If I restrict a user from using a printer, what is it that prevents him from actually using it if he can reach it (by ip for instance).
- Why would I put different types of users in different containers, instead of just putting them in "Users" and then making them members of different groups that have different rights. Is it just an aesthetic matter, everything being tidy and sorted?
- The biggest problem: I do not know what else it can do (please give me some example situations where it could help)
What I guess I expected was that there would be more to this wonder, the Domain Controller, than just authenticating users.
Any help on any of the above matters would be greatly appreciated. Thanks in advance!