Abstract
This paper discusses active directory that is used across many organizations to centralize control of users' logins to organization resources and network. A Saudi company that does not implement active directory which enables centralized, secure management of an entire network is analyzed in this paper. Active directory servers have some vulnerabilities that affect the security of active directory. There are many guidelines recommended to address security issues. Active directory has built-in support of security controls, and there are many possible ways to enhance the security of active directory and the network. Not implementing active directory in large organizations lead to the loss of control over user's resources and information which might result in serious security threats.