keeps a list of literally everything in a forest. not a very detailed list of all the info but enough info to find anything in the forest. if all the domain controllers in a forest are GCs then theres no need for