Almost every account question you’ll handle traces back to one place: the directory. Get comfortable with what it is and how to read it, and a huge slice of L1 work stops feeling like guesswork.
What a directory is
Section titled “What a directory is”A directory service is the organisation’s central, trusted list of identities: the people (and machines) it knows, and what each is allowed to reach. When someone signs in to email, the VPN, or a business app, that service almost always asks the directory: “Is this really them, and are they allowed in?”
You’ll meet directories under a few names (a Windows domain directory, a cloud identity service, or a plain LDAP directory), but the idea is the same everywhere: one identity, trusted in many places.
What an account record tells you
Section titled “What an account record tells you”Open a user’s record and you can usually see, at a glance:
- Who it is: their username or sign-in name (often an email-style address).
- Its state: active, locked, disabled, or expired. This one line decides most tickets.
- Group memberships: the groups that grant access to shares, apps, and mailboxes.
- Attributes: details like department, manager, or phone that other systems read.
Read before you write
Section titled “Read before you write”Here’s the habit that separates a confident agent from a lucky one: read the account before you change it. A user who “can’t get into anything” might be locked, disabled, expired, or simply mistyping, and each of those needs a different fix. Resetting a password on a disabled account, for example, does nothing but waste both your time.