So that administrators can determine which users have access to applications, and users can maintain control over their computer and desktop, the class store uses the administrative structure in the Active Directory, which is structured as a hierarchy of organizational units (OUs).
Class stores are centralized in the Windows NT 5.0 Active Directory. The Active Directory provides support for class stores that contain definition and location information for applications. There can be one or more class stores in any domain. These class stores contain a mix of packages. Class stores can be configured to contain packages by functional areas, level of security access, or any other criteria determined by the administrator.
The architecture of the class store is modular, consisting of a set of blocks that can be reused, as the following figure illustrates.