The Active Directory Domain Controller (AD DC) holds the centralized authentication database (NTDS.dit). It also runs the Kerberos Key Distribution Center (KDC) as integrated with other Windows Server security services that run on the domain controller. The KDC includes the Authentication Server and Ticket Granting Server components.