Active Directory stores user credentials, permissions, and other resources on a centralized and protected location. It logs all user activity and assigns or denies permissions on the network. A domain is a basic building block of the Active Directory structure and clusters computers managed by domain controllers, which are standalone servers running Active Directory services. Multiple domains can exist within a forest, which is the top-level container for an Active Directory implementation and initially contains a single root domain.