Special identity that refers to users who have not supplied a username and password.

To gain access to the network, prospective network users must identify themselves to a network using specific user accounts.

Process of confirming that an authenticated user has the correct permissions to access one or more network resources.

Accounts automatically created when Microsoft Windows Server 2008 is installed. By default, two built-in user accounts are created on a Windows Server 2008 computer: the Administrator account and the Guest account.

Command-line utility used to import or export Active Directory information from a comma-separated value (.csv) file.

Format that contains a comma between each value. The CSV format can be used to import and export information from other third-party applications.

Non-security-related groups created for the distribution of information to one or more persons.

Accounts used to access Active Directory or network-based resources, such as shared folders or printers.

Group used to assign permissions to resources that reside only in the same domain as the domain local group. They can contain user accounts, computer accounts, global groups, and universal groups from any domain, in addition to other domain local groups from the same domain.

Command-line tool used to create, delete, view, and modify Active Directory objects including users, groups, and organizational units.

Special identity group that contains all authenticated users and domain guests.

Group used to grant or deny permissions to any resource located in any domain in the forest. Global groups can contain user accounts, computer accounts, and/or other global groups only from within the same domain as the global group.

Collection of user or computer accounts that is used to simplify the assignment of permissions to network resources.

Process of configuring one or more groups as members of another group.

Group characteristic that defines the extent of the group in the domain tree or forest.

Group characteristic that defines how a group is to be used within Active Directory.

First line of the imported or exported text file that uses proper attribute names.

Format for the data file containing the object records to be created.

Command-line utility used to import or export Active Directory information and create, modify, and delete Active Directory objects.

Account used to access the local computer only. They are stored in the local Security Account Manager (SAM) database on the computer where they reside. Local accounts are never replicated to other computers, nor do these accounts have domain access.

Collection of user accounts that are local to one specific workstation or member server. Local groups are created in the security database of a local computer and are not replicated to Active Directory or any other computers on the network.

Object placed inside another object of the same type.

Each user’s login name—the portion to the left of the “@” within a User Principal Name. The SAM account name must be unique across a domain.

Database containing user accounts and security information that is located on a server.

Security-related group created for purposes of granting resource access permissions to multiple users.

Group used to define permission assignments. Administrators cannot manually modify the group membership of special identity groups, nor can they view their membership lists.

Allows scripts to be run from a Windows desktop or a command prompt. The runtime programs provided to do this are WScript.exe and CScript.exe, respectively.