question and answer about active-directory