Active Directory (AD) is a BYU implementation of Microsoft Active Directory. It provides a single Active Directory domain that BYU uses to simplify the management of systems and users at the university. AD is a computer management tool intended to be used by computer support personnel only. Any department may request the creation of an Organizational Unit (OU) into which they may place computers and security groups, but the OU must be maintained by the appropriate technical resources within the department, typically the department's CSR. Locate department CSR.
An important advantage to using a Active Directory is that computer support personnel do not have to maintain the list of current university users. Net IDs and passwords are maintained through automatic synchronization with other university person information systems.
For departments to join AD, first request and set up an OU by using the Order | Modify menu located at the top of this page. Once an OU has been requested, departments will need to access the AD domain. The name of the domain for Active Directory is BYU.local. This domain name will not resolve off campus. You may only access the active directory domain from on-campus computers, or computers connected to campus through an approved VPN connection.
To maintain a department's OU, computer support personnel will need to add the Windows feature "RSAT: Active Directory Domain Services and Lightweight Directory Tools" through the "Programs and Features" section of settings. Alternatively, CSR's can use Active Directory tools through Citrix.
There is no charge for use of this service.
The feedback box, located below, is intended for general comments on this page or service information and NOT for help with specific technical issues you are having with the service itself. If you would like a response to your feedback, be sure to include your contact information or log into it.byu.edu using the login button at the top of this page.