Which component of Active Directory ensures that directory information remains consistent?

The Knowledge Consistency Checker (KCC) is essential for maintaining consistency in Active Directory (AD) by ensuring that directory replication occurs correctly across all domain controllers. It automatically generates the replication topology and determines how updates to directory information are propagated to other servers within the network.

One of its primary functions is to check for and resolve any inconsistencies that might arise due to changes in the directory, ensuring that all domain controllers have the most current and accurate data. This helps prevent issues such as data conflicts or discrepancies in user information, which can lead to potential errors in user authentication and resource access.

In contrast, replication configuration deals with how and when replication occurs but doesn’t actively ensure consistency; instead, it sets parameters for the KCC's operations. Directory Services Restore Mode is a special boot mode for recovering Active Directory but does not play a role in day-to-day consistency of directory information. The account lockout policy relates to security measures around user accounts and is unrelated to maintaining the overall consistency of directory data.