click below
click below
Normal Size Small Size show me how
Chapter 17
Ch 17 vocab
| Term | Definition |
|---|---|
| Active Directory Domain Services (AD DS) | A component of Active Directory that is responsible for authenticating accounts and authorizing what these accounts can do. |
| administrative shares | The folders and volumes shared by default on a network that administrator accounts can access but are invisible to standard users. Use the fsmgmt.msc command to view a list of shared folders and volumes. |
| Administrators group | A type of user group with a higher level of privileges. When a user account is assigned to this group, the account is granted rights that are assigned to an administrator account. |
| anonymous user | User accounts that have not been authenticated on a remote computer. |
| Authenticated Users group | a group that includes all users that are currently authenticated to the system. |
| BitLocker To Go | A Windows utility that can encrypt data on a USB flash drive and restrict access by requiring a password. |
| data-at-rest encryption | A type of encryption – for example, the Windows Encrypting File System – used for stored data, as opposed to data in transit. |
| Encrypting File System (EFS) | A way to use a key to encode a file or folder on an NTFS volume and protect sensitive data. |
| Everyone group | In Windows, the Authenticated Users group as well as the Guest account. When you share a file or folder on the network, Windows gives access to this group by default. |
| explicit permissions | Permissions assigned by Windows to an object (folder or file) that has inherited permissions disabled. When these permissions are manually set for a subfolder or file, they can override inherited permissions. |
| folder redirection | The technique in Active Directory of using a shared folder on the network that looks like a local folder. |
| forest | The entire enterprise of users and resources that is managed by Active Directory. |
| gpresult | The Windows command to find out which group policies are currently applied to a system for the computer or user. |
| gpupdate | The Windows command to refresh local group policies as well as group policies set in Active Directory on the Windows domain. |
| Group Policy Object (GPO) | A named set of policies that have been created by Group Policy and are applied to an organizational unit. |
| hidden share | A folder whose folder name ends with a $ symbol. When you share the folder, it does not appear in the File Explorer or Windows Explorer window of remote computers on the network. |
| Home folder | The default folder presented to a user when they are ready to save a file. On a peer to- peer network, it is normally the Documents folder in the user profile. |
| inherited permissions | Permissions assigned by Windows that are obtained from a parent object. |
| Local Group Policy | A type of group policy that applies only to the local computer or local user. |
| Local Security Policy | A type of Local Group Policy that applies only to the local computer's Windows security settings. |
| local share | Folders on a computer that are shared with others on the network by using a folder's Properties box. They are used with a workgroup and not with a domain. |
| Local Users and Groups | For business and professional editions of Windows, a Windows utility console that can be used to manage user accounts and user groups. |
| logon script | A list of commands stored in a script file that is performed each time a user signs in to Windows. |
| network share (or mapped drive) | A resource on the network that is shared among assigned users. |
| NTFS permissions | A type of permissions used to share a folder or file over a network. These permissions can be applied to local users and network users. The folder or file must be on an NTFS volume. |
| organizational unit (OU) | An object that represents a collection of user groups and/or computers in Active Directory. |
| security group | An Organizational unit that includes groups of users or computers which are similar to user groups in a Windows workgroup except a security group can include a computer or a user. |
| Server Manager | A Windows Server console that contains the tools used to manage Active Directory on a Windows domain network. |
| share permissions | A method to share a folder (not individual files) to remote users on the network and assign the level of access. These permissions do not apply to local users of a computer. |
| TPM (Trusted Platform Module) | A chip on the motherboard used with software applications for security. It can be used with Windows BitLocker Drive Encryption to provide full-disk encryption and to monitor for system tampering. |
| Users group | A type of Windows user account group. An account in this group is a standard user account, which does not have as many rights as an administrator account. |