Managed domain is an Active Directory domain registered with an Adaxes service. Each service stores the list of managed domains as part of its configuration. You can register domains from different forests with one Adaxes service to access their resourсes and manage them collectively. So, after you register domains, all Adaxes clients will be able to browse, create, modify and search for objects in these domains.

When registering a managed domain, you need to enter the domain name and a user account that has administrative permissions in this domain. A service access to a managed domain is restricted by the privileges of this account. The logon information can be changed at any moment.

If services share configuration, the information on managed domains is also shared between them. However, the account and password entered for managed domains are not shared as this information is held in a secure local storage of the service. So, you will need to provide an account name and password for every managed domain in your service.

To work with AD objects located in different domains more efficiently, you can use Business Units. With the help of Business Units it is easy to create alternative hierarchies that can contain objects from different domains and to process them collectively.