Term
|
Definition
| The default storage location for User Profiles in Windows Server 2008 |
|
|
Term
|
Definition
| Hidden shares created by windows that are available only to members |
|
|
Term
| Administrative template files |
|
Definition
| XML format text files that define policies in the Administrative Templates folder in a GPO. You can create custom ADMX files to create your own policies. |
|
|
Term
|
Definition
| is a user that can back up and restore the computer regardless of file system security. A member of the ___________ group can extract files and directories for which the user would normally not have access. |
|
|
Term
| Blocking inheritance (GPO) |
|
Definition
| prevents GPOs linked to parent containers from affecting child containers. |
|
|
Term
|
Definition
| An Active Directory object that usually represents a person for informational purposes only, much like an address book entry. |
|
|
Term
| CSVDE (Comma Separated Value Data Exchange) |
|
Definition
| uses a regular text file to import users (and other objects) into Active Directory with ______ (a command line tool) |
|
|
Term
| DFS (Distributed File System) |
|
Definition
| A feature that makes shared files more accessible by grouping shared folders from multiple servers into a single folder hierarchy. |
|
|
Term
|
Definition
| An option on NTFS volumes that enables administrators to limit how much disk space a user can occupy with his or her files. |
|
|
Term
|
Definition
| A group type used when you want to group users together, mainly for sending e-mails to several people at once with an Active Directory–integrated e-mail application, such as Microsoft Exchange. |
|
|
Term
|
Definition
| A Windows server that has Active Directory installed and is responsible for allowing client computers access to domain resources. |
|
|
Term
|
Definition
| Group Policy Objects stored in Active Directory on domain controllers. They can be linked to a site, a domain, or an OU and affect users and computers whose accounts are stored in these containers. |
|
|
Term
|
Definition
| If you're logging into a domain as a domain user, you'll have access to shared files/folders/printers. If you logon locally, then you forfeit all those resources and only have access to things connected directly to your computer. |
|
|
Term
|
Definition
| - Adds objects to Active Directory. Used mainly for adding account objects but can also be used to create OUs and contacts. |
|
|
Term
|
Definition
| Displays an object’s properties onscreen by default, but the output can be redirected to a file. |
|
|
Term
|
Definition
| Modifies existing Active Directory objects. |
|
|
Term
|
Definition
| Moves objects in a domain to another folder or OU or renames the object |
|
|
Term
|
Definition
| Finds and displays objects in Active Directory that meet specified criteria. The output can be displayed onscreen or sent (piped) to other commands. |
|
|
Term
| DSRM (Directory Services Restore Mode) |
|
Definition
| This boot mode is used to perform restore operations on Active Directory if it becomes corrupted or parts of it are deleted accidentally. |
|
|
Term
| EFS (Encrypted File System) |
|
Definition
| Makes rncrypted files inaccessible to everyone except the user who encrypted the file, including users who have been granted permission to the file. |
|
|
Term
|
Definition
| which allows users to encrypt and decrypt files on a hard drive. |
|
|
Term
| Enforcing inheritance (GPO) |
|
Definition
| These GPO’s settings are applied to all child objects, even if a GPO with conflicting settings is linked to a container at a deeper level. |
|
|
Term
|
Definition
| This universal group is found only on DCs in the forest root domain. Members have full control over Admins/universal forestwide operations |
|
|
Term
|
Definition
| Defines the method and format an OS uses to store, locate, and retrieve files from electronic storage media. |
|
|
Term
| fine-grained password policies |
|
Definition
| A new feature in Server 2008, used to set different password and account lockout policies for targeted users and groups. These policies are created by defining a Password Settings Object (PSO) in the Password Settings Container (PSC). |
|
|
Term
| GPO Enforcing inheritance |
|
Definition
| the GPO’s settings are applied to all child objects, even if a GPO with conflicting settings is linked to a container at a deeper level. |
|
|
Term
|
Definition
| A method to alter the normal scope of a GPO and exclude certain objects from being affected by its settings. ________ methods include security filtering, which uses GPO permissions, and WMI filtering, which uses Windows Management Instrumentation queries to select objects. |
|
|
Term
|
Definition
| prevents GPOs linked to parent containers from affecting child containers. |
|
|
Term
| GPO Loopback policy processing |
|
Definition
| This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. |
|
|
Term
|
Definition
| This command displays a verbose (detailed) report showing the computer policy settings and the GPO they originated from as well as the policy settings |
|
|
Term
|
Definition
| Refreshes the local computers policy and any Active Directory-based Group policies. |
|
|
Term
| Group Policy Container (GPC) |
|
Definition
| A GPO component that’s an Active Directory object stored in the System\Policies folder. The ___ stores GPO properties and status information but no actual policy settings. |
|
|
Term
|
Definition
| A GPO component that’s stored as a set of files in the Sysvol share. It contains all the policy settings that make up a GPO as well as related files, such as scripts. |
|
|
Term
|
Definition
| A property of a group that determines the reach of a group’s application in a domain or a forest—which security principals in a forest can be group members and to which forest resources a group can be assigned rights or permissions. |
|
|
Term
|
Definition
| A network share on a Microsoft network that is not visible when viewing another computer's shares |
|
|
Term
| LDAP (Lightweight Directory Access Protocol) |
|
Definition
| A protocol that runs over TCP/IP and is designed to facilitate access to directory services and directory objects. _____ is based on a suite of protocols called X.500, developed by the International Telecommunications Union. |
|
|
Term
| LDFIDE (Lightweight Data Interchange Format, Data Exchange) |
|
Definition
| exporting users from one domain and importing them into another domain |
|
|
Term
|
Definition
| Members of the local Administrators group are affected by settings in this GPO. This GPO doesn’t contain a Computer Configuration node, so policies are limited to user related settings. |
|
|
Term
|
Definition
| A Group Policy Object that’s stored on local computers and can be edited by the Group Policy Object Editor snap-in. |
|
|
Term
| Local Non-Administrators GPO |
|
Definition
| All users of the computer who aren’t members of the local Administrators group are affected by settings in this GPO |
|
|
Term
|
Definition
| - is a database present on servers running Windows Server 2003 that stores user accounts and security descriptors for users on the local computer. |
|
|
Term
|
Definition
| administrators can restrict days and hours that users can log on to the domain. |
|
|
Term
|
Definition
| A user profile that can be changed during a user’s logon session, but the next time the user logs on, the changes aren’t saved, and the profile reverts to its original state. |
|
|
Term
| Moving/Copying compressed files |
|
Definition
| When you copy or move a file to a folder, the file takes on the compression attribute of the target folder |
|
|
Term
| Moving/Copying encrypted files |
|
Definition
| it attempts to encrypt the destination file with the keys used in the encryption of the source file. If this cannot be done |
|
|
Term
|
Definition
| is an abstract container or environment created to hold a logical grouping of unique identifiers or symbols (i.e., names) |
|
|
Term
|
Definition
| Permissions set on folders or files on an NTFS-formatted volume. NTFS permissions protect both network and interactive file access. |
|
|
Term
|
Definition
| A hidden system file containing user preferences for Windows and application settings; merged with the Registry when a user logs on to Windows |
|
|
Term
|
Definition
| Local or roaming profiles are protected from permanent change by renaming NTUSER.DAT to ________. By renaming the file, you have effectively made the profile read-only |
|
|
Term
| Resultant Set of Policy (RSOP) |
|
Definition
| A report showing which policy settings apply to a user, computer, or both and where these policy settings originated. ____ reports can be created using the ____ snap-in, the Group Policy Results Wizard in GPMC, and the Gpresult.exe command-line program. |
|
|
Term
|
Definition
| A user profile that follows the user no matter which computer he or she logs on to. It’s stored on a network share so that when a user logs on to any computer in the network, the profile is copied from the network share to the profile folder on the local computer. |
|
|
Term
| SAM (Security Accounts Manager) |
|
Definition
| Local user accounts are found in Windows client OSs, such as Windows XP and Vista, as well as Windows Server OSs on systems that aren’t configured as domain controllers, These accounts are stored in the Security Accounts Manager. |
|
|
Term
|
Definition
| A group type that’s the main Active Directory object administrators use to manage network resource access andgrant rights to users. |
|
|
Term
|
Definition
| Text files with an .inf extension that containinformation to define policy settings in the Computer Configuration\Policies\Windows Settings\Security Settings node of a local or domain GPO. |
|
|
Term
|
Definition
| Members can log on locally to DCs, manage some services, manage shared resources, back up and restore files, shut down DCs, format hard drives, and change the system time. There are no default members. |
|
|
Term
|
Definition
| feature on the Windows file system that allows users to access previous versions of files in shared folders and restore files that have been deleted or corrupted. |
|
|
Term
|
Definition
| Permissions applied to shared folders that protect files accessed across the network. Share permissions are the only method for protecting files on FAT volumes. |
|
|
Term
|
Definition
| A user profile type that prevents a user from logging on to the domain when the mandatory profile is unavailable. |
|
|
Term
|
Definition
| If this check box is selected, the user has too many failed logon attempts. In this case, the account is locked out and the user can’t log on. Clearing the check box unlocks the account. |
|
|
Term
|
Definition
is a collection of a user’s personal files and settings that define his or her working
environment. |
|
|
Term
|
Definition
| a user account that’s copied to create users with common attributes. |
|
|
Term
|
Definition
| This GPO also contains only a User Configuration node and affects only users who log on to the local computer with an account defined in the local SAM database. |
|
|
Term
|
Definition
| objects which are used to mount and provide an entry point to other volumes. Mount points can be created in a directory on an NTFS file system, |
|
|
Term
| XML format file (Extensible Markup Language ) |
|
Definition
| is a markup language created to structure, store, and transport data by defining a set of rules for encoding documents |
|
|
Term
| Where are user profiles stored by default in Windows Server 2008? |
|
Definition
|
|
Term
| If a software package is assigned to a group of targeted computers via the Computer Configuration node, what happens? |
|
Definition
| The package installation is mandatory and begins the next time the computer starts |
|
|
