Active Directory uses multi-master data storage. It replicates directory data on multiple domain controllers throughout a domain. Changes in data on one domain controller are replicated to the other domain controllers in the domain.
To perform virtually any operation, ADEdit must bind to one or more Active Directory domain controllers. ADEdit can then query Active Directory for data within bound domains, retrieve Active Directory objects, modify retrieved objects, create new objects, and delete existing objects. Those objects include all Centrify-specific objects such as zone objects, zone user objects, role objects, and more.
Note: ADEdit is not limited in scope to Centrify-specific information. An administrator with full privileges could define, retrieve, modify, and delete information for any object or attribute in Active Directory.