Overview[1]#
Domain Directory Partition is a NamingContext in Microsoft Active Directory, contains a < AD DOMAIN > container (for example, the example.com container), which stores users, computers, groups, and other objects for a specific Microsoft Active Directory AD DOMAINUpdates to the < domain > container are replicated only to all Domain Controllers within the AD DOMAIN and to Global Catalog servers if the update is made to an attribute that is marked for replication (Partial Attribute Set) to the Global Catalog.
Global Catalog Domain Controllers contain the Partial Attribute Set of Domain Directory Partition for each AD DOMAIN within the AD Forest
Each AD DOMAIN can have multiple Domain Controllers and a AD Forest can have multiple AD DOMAINs.
Each Domain Controller stores a full replica of the Domain Directory Partition for the AD DOMAIN that it is a member, but does not store replicas of the Domain Directory Partitions for other AD DOMAINs within the AD Forest.
The Directory Partition Hierarchy can be viewed in the Active Directory Domains and Trusts console, where trust relationships between domains can be managed.
Active Directory Users and Computers obtains it data from this partition.
More Information#
There might be more information for this subject on one of the following:- AD DOMAIN
- Application Directory Partitions
- Directory Partition Hierarchy
- Directory Partition Subtrees
- FLAG_ATTR_REQ_PARTIAL_SET_MEMBER
- FLAG_DOMAIN_DISALLOW_RENAME
- LDAP Query Examples for AD
- MsDS-TrustForestTrustInfo
- NamingContext
- X-SYSTEMFLAGS
- [#1] - Directory Partitions
- based on information obtained 2016-09-25