Active Directory (AD)

A service overview and catalog of Active Directory (AD) provided by the UC Berkeley IT Service Hub.

Description

Directory service used to manage users, computers, permissions, and security in a centralized way.

Authentication
- Verifies your identity when you log in
- Uses protocols like Kerberos
- Ensures only authorized people get access
Authorization
- Decides what you can access after you log in
- Files, printers, apps, servers—AD controls it all
Centralized Management: Admins can manage all these items from one place
- User accounts
- Password policies
- Computers
- Security groups
- Software deployment
- Network-wide settings
Group Policy: This is one of AD's superpowers
- Enforces rules across all computers
- Examples: password rules, desktop settings, software installation

Familiarize yourself with:
Submit the Request OU Form (requires authentication)
After completing the form, email the CalNetAD team at win-ticket@berkeley.edu to discuss your requirements.

Eligibility	This service is available to Faculty and Staff
Contact	Please email win-ticket@berkeley.edu
Availability	Available 24/7. Support is provided Monday–Friday, 8:00 AM – 5:00 PM PT, excluding University holidays and curtailment periods.
Cost	There are no direct costs associated with this service.
Data Classification	This service is rated for Protection Level P4, Availability Level A4, and Recovery Level R5 data. Compliance: Users are responsible for ensuring data handled within this service complies with the Data and IT Resource Classification Standards.
Service Level Agreements (SLAs)	Service Level Agreement information