~/moritzsamrock_

Global Catalog

Also known as:GC

Global Catalog: A special domain-controller function that also maintains a partial replica of every object in the forest. It enables forest-wide searches, UPN-based logon, and resolution of universal group memberships. The replicated attribute set and availability of global-catalog servers affect both performance and logon capability in distributed environments.

How it works and where it fits

Global Catalog denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

  • Active Directory ForestActive Directory ForestTop-level Active Directory structure whose domains share a schema, configuration, global catalog, and mutual trust foundation.: Top-level Active Directory structure whose domains share a schema, configuration, global catalog, and mutual trust foundation.
  • Domain ControllerDomain ControllerServer running Active Directory Domain Services that replicates directory data and supports authentication and authorization for a domain.: Server running Active Directory Domain Services that replicates directory data and supports authentication and authorization for a domain.
  • Active Directory GroupActive Directory GroupDirectory object used to assign permissions collectively or to form email distribution lists.: Directory object used to assign permissions collectively or to form email distribution lists.
  • Active Directory UserActive Directory UserActive Directory object representing a human or technical identity with credentials, attributes, and group memberships.: Active Directory object representing a human or technical identity with credentials, attributes, and group memberships.

Related terms