The easiest way to remember the difference between both is that Active Directory handles your identity and security access and Domain Controllers authenticate your authority. In other words, it can be said as the Active Directory Domain Service runs the domain controller.