Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Server 4.2
Ch 4.2 Vocab
| Term | Definition |
|---|---|
| Lightweight Directory Access Protocol (LDAP) | An open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. |
| local group account | Groups that are created in the local Security Accounts Administrator (SAM) database on the specific computer. |
| logon script | A file of commands that are executed at logon; a home folder is disk space on a particular server given to a user to store his or her files. |
| member server | A server on an Active Directory managed network that does not have Active Directory installed. |
| Microsoft Identity Manager (MIM) | A state-based identity management software product, designed to manage users' digital identities, credentials, and groupings throughout the lifecycle of their membership of an enterprise computer system. |
| object | The basic element of Active Directory in Microsoft Windows Server family that represents something on the network, such as a user, a group, a computer, an application, a printer, or a shared folder. |
| organizational unit (OU) | A grouping of objects within a domain that provides a means to establish specific policies for governing those objects, and that enables object management to be delegated. |
| PDC emulator | An Active Directory FSMO role. In legacy Active Directory domains, this role performed emulation of a Windows NT4 feature for backward compatibility. However, in modern Active Directory domains, it coordinates user password changes and sends time informat |
| permission | After you access resources on the system (e.g., files, directories, and printers), you are granted access to each resource based on this setting that the resource lists for your local user account within its Access Control List (ACL). |
| prestaging | Creating computer accounts for computers within the appropriate OUs prior to joining the computer to the domain. |
| primary domain controller (PDC) | A domain controller in a Windows NT4 domain that stored a read-write copy of a SAM database that could authenticate users within the domain and issue tokens. |
| privileged access management (PAM) | A solution that helps organizations restrict privileged access within an existing Active Directory environment. |
| Read-only Domain Controller (RODC) | A domain controller that houses Active Directory information, but cannot be updated, such as to create a new account. This specialized domain controller receives updates from regular DCs, but does not replicate to any DCs because it is read-only by design |
| realm trust | A trust used to create a relationship between an Active Directory Services domain and a Kerberos V5 realm that uses a third-party directory service. These trusts can be transitive or nontransitive. They can also be unidirectional or bidirectional. You’re |
| Relative Identifier (RID) | A unique Identifier; a security principal relative to the local or domain security authority that issued the SID. |
| RID Master | Active Directory FSMO role that issues sequential ranges of Relative Identifiers (RIDs) to domain controllers within the domain. |
| right | After you log in to a Windows system, you receive any rights to the operating system assigned to your local user account, such as the right to change the system time or shut down the system. |
| role seizure | A process where an administrator can force another domain controller to assume the FSMO role. |
| schema | Elements used in the definition of each object contained in Active Directory, including the object class and its attributes. |
| Schema Master | An Active Directory FSMO role that must be contacted in order to modify the Active Directory schema. Any schema changes are then replicated by the Schema Master to all other domain controllers in the forest. |
| schema partition | A partition that contains the Active Directory schema and must be identical on all domain controllers within the forest to ensure that Active Directory objects from any domain in the forest can be interpreted by any domain controller in the forest. |
| Security Accounts Manager (SAM) | A database file in Windows XP, Windows Vista, and Windows 7, 8.1, and 10 that stores users' passwords. It can be used to authenticate local and remote users. Beginning with Windows 2000 SP4, Active Directory authenticates remote users. |
| security group | Used to assign a group of users permission to access network resources. |
| security identifier (SID) | An identifier used to identify the object within an ACL, as well as a globally-unique identifier (GUID) attribute that guarantees its uniqueness within the Active Directory database. |
| selective authentication | - Used in a forest trust to enable you to limit which users and groups from the trusted domain are able to authenticate. |
| Service Principle Name (SPN) | An identification number for a network service that employs Kerberos security. |
| service record | A Domain Name System (DNS) resource record that is used to identify computers that host specific services. |
| shortcut trust | An AD trust relationship that administrators can explicitly define in addition to the trust relationships that AD automatically creates between the domains in an AD forest as part of the AD installation process. |
| Simple Mail Transfer Protocol (SMTP) | A protocol for sending e-mail messages between servers. |
| site | Represents a physical location in your organization and may be associated with one or more subnet objects that represent IP networks that contain domain controllers. See site object. |
| site link object | Contains attributes that specify when replication is allowed to occur and then connects site objects to other site objects. |
| standalone server | A Windows Server system that is part of a workgroup. |
| subnet object | - Represents an IP network that contains domain controllers. |
| template user account | An account created by an administrator that can be copied to create new user accounts with common properties. |
| ticket | A token obtained by Linux, UNIX, macOS, and Windows 2000 and later clients that use the Kerberos ticket-based authentication protocol to authenticate to a domain controller. |
| transitive | A trust that is extended not only to a child object, but also to each object that the child trusts. |
| tree | Related domains that use a contiguous namespace, share the same schema, and have two-way transitive trust relationships. |
| trust | Allows users to access resources within other domains that they have been granted access to within the resource’s ACL. |
| trust relationship | Allows users to access resources within other domains that they have been granted access to within the resource’s ACL. |
| Universal Group Membership Caching (UGMC) | A setting for a site on a domain controller that indicates that the site must contact a remote global catalog the first time each user authenticates to the domain in order to verify their universal group memberships. These universal group memberships are |
| User Principle Name (UPN) | The name of a system user in an email address format. |
| virtual private network (VPN) | A network that works by routing your device's Internet connection through your chosen VPN's private server rather than your Internet service provider (ISP) o that when your data is transmitted to the Internet, it comes from the VPN rather than your comput |
| X.500 | A series of computer networking standards covering electronic directory services. |
Created by:
CarlyJo87