Active Directory 面试题与答案

Question: How does Active Directory handle authentication and authorization?

Answer: Authentication is the process of verifying the identity of a user, while authorization involves granting or denying access to resources based on the user's permissions. Active Directory uses Kerberos authentication and access control lists (ACLs) for these purposes.

Example:

When a user logs in, Active Directory authenticates the user using Kerberos, then checks the user's permissions to determine access rights.