What can be created in Active Directory Domain Services (AD DS)?

In Active Directory Domain Services (AD DS), the primary function is to manage and organize resources within a network, including user accounts, groups, and computer accounts. Computer accounts are a fundamental component of AD DS, as they represent machines that are joined to the domain. Each computer account in AD DS establishes a unique identity for a computer within the network, facilitating management, authentication, and policy application for that computer.

AD DS enables administrators to control access to resources, manage policies, and deploy settings across all the computers in the domain efficiently. The ability to create and manage computer accounts is essential for maintaining a secure and organized environment, ensuring that only authorized devices can interact with the network resources.

In contrast, while line-of-business applications, SaaS applications, and mobile devices can interact with or rely on Active Directory for authentication and user management, they are not created within AD DS itself. Instead, they are separate entities that may utilize AD DS for identity and access management but are not resources managed directly by it.