Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Server 4
Ch 4.1 Vocab
| Term | Definition |
|---|---|
| Access Control List (ACL) | A list of all security descriptors that have been set up for a particular object, such as for a shared folder or a shared printer. |
| Active Directory Administrative Center | A Windows Server tool that includes enhanced management experience features to ease the administrative burden for managing Active Directory Domain Services (AD DS). |
| Active Directory Domains and Trusts | A Windows Server tool used to raise domain functional levels and domain forest levels |
| Active Directory Recycle Bin | Introduced in Windows Server 2008 R2, the goal of this feature is to facilitate the recovery of deleted Active Directory objects without requiring restoration of backups, restarting Active Directory Domain Services, or rebooting domain controllers |
| Active Directory Sites and Services | An administrative tool that is used to manage sites and the related components. It comes with its own MMC snap-in. |
| Active Directory Users and Computers | A Microsoft Management Console snap-in that you use to administer Active Directory (AD). |
| Advanced Encryption Standard (AES) | A symmetric block cipher chosen by the U.S. government to protect classified information. It is implemented in software and hardware throughout the world to encrypt sensitive data. It is essential for government computer security, cybersecurity, and elect |
| Attribute | An Active Directory type object property. |
| backup domain controller (BDC) | A role a Windows NT computer takes on to help manage access to network resources. It maintains a read-only copy of a user accounts database and verifies logons from users. The read-only copy of the database is automatically synchronized with primary domai |
| bridgehead server | A domain controller (DC) that functions as the primary route of Active Directory (AD) replication data moving into and out of sites. |
| cached credential | A type of backup login data that is saved in storage for use by a user when he or she cannot log in because the primary server is unavailable. |
| child domain | Another name for subdomain; a domain that is part of a larger domain name in a DNS hierarchy. |
| Class | A component of the Active Directory schema which defines the “type” for an object or, in other words, the set of mandatory and optional attributes an object can have. |
| common name (CN) | A single-valued attribute that represents an object’s relative distinguished name, such as, a group or object name in AD |
| compound authentication | An authentication technique that enables a Kerberos Ticket-Granting Service (TGS) request to include two identities: the identity of the user and the identity of the user's device |
| computer account | An account created for your computer within the Active Directory database. This computer account contains an encryption key that is used to encrypt the communication between your computer and the domain controllers in the domain during the authentication |
| conditional forwarder | A DNS server that only forwards DNS queries for specific domain names |
| configuration partition | A partition that stores the structure and layout of the forest, including the names of each domain and the trust relationships between them |
| contiguous namespace | A collections of domains that share a common DNS root name. |
| directory partition | A contiguous Active Directory subtree that stores object data and is replicated across Domain Controllers |
| Directory Services Restore Mode (DSRM) | A safe mode boot option for Windows Server domain controllers allowing an administrator to repair, recover, or restore an Active Directory database |
| disjointed namespace | A namespace in which the child object name does not resemble the parent object name. For example, different trees in the same forest do not share the same DNS domain name. |
| distinguished name (DN) | The name that uniquely identifies an entry in the directory, the first component of which is referred to as the Relative Distinguished Name (RDN). |
| distribution group | A list of users that enables one e-mail message to be sent to all users on the list |
| Domain Naming Master | An Active Directory FSMO role that must be contacted to add or remove domains and trust relationships within the forest |
| domain partition | Contains directory objects, such as users and computers, associated with the local domain. |
| external trust | A one-way, non-transitive trust that is manually created to establish a trust relationship between AD DS domains that are in different forests, or between an AD DS domain and a Windows NT 4.0 domain. |
| Flexible Single Master Operations (FSMO) | Domain and forest functions that must be coordinated from a single domain controller. |
| forest functional level | A forest-wide setting that refers to the types of domain controllers in a forest, which can be any combination of Windows Server operating systems, and also reflects the types of Active Directory services and functions supported. |
| forest root domain | The first domain that you deploy in an Active Directory Forest. The domain remains the forest root domain for the life cycle of the AD DS deployment, and contains the Enterprise Admins and Schema Admins groups |
| forest trust | A connection between two Active Directory forests that allows users, applications, and computers to authenticate across the forests |
| global catalog | A repository for all objects and the most frequently used attributes for each object in all domains. Each forest has a single global catalog that can be replicated onto multiple servers |
| globally-unique identifier (GUID) | A unique number, up to 16 characters long, that is associated with an Active Directory object |
| group nesting | The process of adding a group to the membership list of another group. |
| group scope | A scope that allows administrators to organize the assignment of rights and permissions across multiple domains |
| Infrastructure Master | An Active Directory FSMO role that coordinates group membership, as well as the use of GUIDs and DNs between the current domain and other domains in the forest. |
| internal trust | Default trust relationships that allow users to access resources in any other domain within the forest that they have been granted permission to. |
| Kerberos armoring | Used in security to establish a secure channel or communications tunnel between a client seeking authentication for access to a computer service and the server providing access keys for secure communications. |
Created by:
CarlyJo87