Active Directory Data Model

1. Objects
   • Represent entities such as users, computers, groups, printers, etc.
   • Each object is an instance of a specific class defined in the schema.
2. Attributes
   • Describe the properties of objects (e.g., cn for common name, mail for email address).
   • Attributes can store different types of data like strings, numbers, or dates.
3. Schema
   • Defines:
     • The object classes (e.g., user, group, organizational Unit).
     • Required attributes (must be present for an object of that class).
     • Optional attributes (additional properties that may be present).
     • Allowed parent classes (which class the object can be a child of).
4. Hierarchy and Inheritance
   • Objects are arranged in a hierarchical structure called the Directory Information Tree (DIT).
   • Every object, except the root, must have a parent.
   • Classes can inherit structure and attributes from other classes, similar to object-oriented programming.

Example

A user object might include:

• Mandatory attributes: cn, sAMAccountName
• Optional attributes: telephoneNumber, description
• Parent class: Often organizationalPerson, which may itself inherit from person