The AD DS Data Store is where the domain controller stores all information about a domain, such as configuration, object information, and policies. The data store consists of the NTDS.dit (AD DS directory information tree), which houses all AD DC info and password hashes. It is by default stored in %SystemRoot%\NTDS and can only be accessed by the domain controller.