What contains the rules and definitions that are used for creating and modifiying objects classes and attributes within active directory?