Organizational UnitAdministration Boundary, container designed as object repositories. OU contains AD objects and their properties, and data, provide groupings that can be…
Organizational unit (OU)A container object that is an Active Directory administrative partition. OUs can contain users, groups, resources, and other OUs.
OU (organizational unit)An Active Directory container object used within domains. An organizational unit is a logical container into which users, groups, computers, and other…
OwnerThe only security principal who has an inherent right to allow or deny permission to access an object.
Parent ObjectAn object in which another object resides. For example, a folder is a parent object in which a file, or child object, resides.
Parent-child trust relationshipThe two-way, transitive trust relationship that is established when you add a domain to an Active Directory tree.
PartitionA partition is an individual section of computer storage media such as a hard drive.
permissionsAuthorization to perform operations associated with a shared resource, such as a file, directory, or printer.
PolicyThe contract form issued by the company to explain the coverage provided. It is a legal document.
Primary Domain Controller Emulator (PDC)PDC provides backward compatibility to Windows NT. In native forest, manages password changes and synchronizes time between DCs.
RDNSee definition for: Relative Distinguished Name (RDN)
Relative Distinguished name (RDN)The part of the name of an object that is an attribute of the object itself. The attribute that provides the RDN for an object is referred to as the…
Relative ID (RID)The master service that is responsible for the assignation of relative IDs to other domain controllers within the domain.
Remote Procedure Call (RPC)(RPC)A Remote Procedure Call (RPC) is a communication mechanism which allows one UNIX process to communicate with another UNIX process.
ReplicaA special copy of an IBM® Lotus® Notes® application that, because it shares a replica ID with the original application, can exchange information with…
ReplicationThe in vivo synthesis of double-stranded DNA by copying from a single-stranded template.
Resource PublishingThe process of making an object visible and accessible to users in a Windows 2000 domain.
SASLSee definition for: Simple Authentication and Security Layer (SASL)
SchemaA set of rules or conceptual model for data structure and content, such as a description of the data content and relationships in a database.
Schema cacheAn in-memory copy of the schema on the domain controller. To improve performance on schema operations (such as new object validation), each domain…
Schema MasterThe domain controller assigned to control all updates to the schema within a forest. At any time, there can be only one schema master in the forest.
Schema partitionThe schema directory partition holds the definitions for the type of data that can be held by the directory store.
Secure Sockets Layer (SSL)A protocol that provides secure data communication through data encryption. This protocol enables authentication, integrity, and data privacy over…
security contextThe security attributes or rules that are currently in effect. For example, the rules that govern what a user can do to a protected object are determined…
Security descriptorA data structure that contains security information associated with a protected object.
Security GroupsGroups that can be used to organize users and domain objects, thus simplifying administration.
Security Identifier (SID)In Windows-based systems, a unique value that identifies a user, group, or computer account within an enterprise.
Security packageThe software implementation of a security protocol. Security packages are contained in security support provider dynamic-link libraries (DLLs) or in…
Security principalIn Windows-based systems, a user, group, or computer that is automatically assigned a security identifier (SID) to control access to resources.
Security protocolA specification that defines security-related data objects and rules about how the objects are used to maintain security on a computer system.
Security Support Provider (SSP)A dynamic-link library (DLL) that implements the Security Support Provider Interface (SSPI) by making one or more security packages available to…
Security Support Provider Interface (SSPI)A common interface between transport-level applications, such as Microsoft Remote Procedure Call (RPC), and security support providers (SSPs), such as…
Security TemplateA physical file representation of a security configuration that can be applied to a local computer or imported to a Group Policy object in Active…
service accountA Windows Server 2003 or Windows 2000 user account that is used to run some Exchange services. [Exchange 2003]
Service Principal Name (SPN)A way of referring to a service principal. SPN structures generally follow Internet Engineering Task Force (IETF) naming conventions, and they often…
Single-master operationsActive Directory operations that are single-master, that is, not permitted to occur at different places in the network at the same time.
SiteIn archeology, any location of past human activity.
Site LinkAn object in Active Directory that contains information about the link between two Active Directory sites.
Site topologyDetermines how each of the database containers will be linked to the others for replication purposes.
SSPShortened Statutory Period -- see MPEP §710.02(b) for more
SSPISee definition for: Security Support Provider Interface (SSPI)
SynchronizationFor data streams, the process whereby a received set of data is placed in one to one correspondence with the data assumed to have been transmitted.
Transitive trustThe trust relationship that inherently exists between Windows 2000 and/or Windows Server 2003 domains in a domain tree or forest, or between trees in a…