Microsoft's directory service for Windows domain networks. Provides authentication, authorization, and policy management. Foundation of enterprise Windows identity.