Active Directory Lightweight Directory Services (AD LDS) is a Microsoft LDAP directory service independent from an AD DS domain and intended for applications.
Simple definition
Active Directory Lightweight Directory Services (AD LDS) is a Microsoft LDAP directory service independent from an AD DS domain and intended for applications. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to provide an application LDAP directory without creating another domain or domain controller. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
An AD LDS instance has its own schema and application partitions. It can run on a member server and multiple instances can coexist.
Key points
- Scope: A Microsoft LDAP directory service independent from an AD DS domain and intended for applications.
- Operational goal: Provide an application LDAP directory without creating another domain or domain controller.
- Implementation: An AD LDS instance has its own schema and application partitions. It can run on a member server and multiple instances can coexist.
Points to watch
AD LDS does not replace AD DS for Windows sign-in, Group Policy, or domain Kerberos.
In short
Active Directory Lightweight Directory Services (AD LDS) = a Microsoft LDAP directory service independent from an AD DS domain and intended for applications. Use it when you need to provide an application LDAP directory without creating another domain or domain controller.