access controlThe mechanisms for limiting access to certain information based on a user's identity and membership in various predefined groups.
Access Control Entry (ACE)In Windows-based systems, an entry in an access control list (ACL) containing the security ID (SID) for a user or group and an access mask that specifies…
access control list (ACL)(ACL)In Windows-based systems, a list of access control entries (ACE) that apply to an entire object, a set of the object's properties, or an individual…
Access Control ServerA component of Cisco Identity Based Networking Services (IBNS) architecture that improves network access security for Cisco network devices.
access tokenA data structure that contains authorization information for a user or group. A system uses an access token to control access to securable objects and to…
account federation serverThe federation server that is located in the corporate network of the account partner organization.
account federation server proxyThe federation server proxy that is located in the perimeter network of the account partner organization.
account partnerA federation partner that is trusted by the Federation Service to provide security tokens to its users (that is, users in the account partner…
Active Directory Application Mode (ADAM) instanceFor Active Directory Application Mode (ADAM), a single copy of the ADAM directory service, along with its associated directory store, assigned Lightweight…
Active Directory Domain ServicesThe Microsoft Windows based directory service. Active Directory stores information about objects on a network and makes this information available to…
Active Directory Federation ServicesA component that provides Web single-sign-on (SSO) technologies. AD FS provides SSO by securely sharing digital identity and entitlement rights across…
Active Directory Service Interfaces (ADSI)A client-side product based on the Component Object Model (COM). ADSI defines a directory service model and a set of COM interfaces that enable Windows NT…
active partitionA partition from which a computer starts up. The active partition must be a primary partition on a basic disk.
active volumeThe volume from which the computer starts up. The active volume must be a simple volume on a dynamic disk.
AD DSThe Microsoft Windows based directory service. Active Directory stores information about objects on a network and makes this information available to…
AD FSA component that provides Web single-sign-on (SSO) technologies. AD FS provides SSO by securely sharing digital identity and entitlement rights across…
AD FS Web AgentAn installable role service of AD FS that is used to create an AD FS-enabled Web server.
AD FS-enabled Web serverA Web server that is configured with the appropriate AD FS Web Agent softwareâeither the claims-aware agent or the Windows tokenâbased…
AD LDSA lightweight directory service that is designed specifically for use with directory-enabled applications.
AD LDS instanceA single copy of the ADLDS directory service that includes its associated directory store and its application event log.
AD/AMA special directory service that is an add-on to WS03 and that is designed to run as a pure lightweight application protocol (LDAP) directory.
ADAMSee definition for: Active Directory Application Mode (ADAM)
ADAM instanceSee definition for: Active Directory Application Mode (ADAM) instance
ADAMSyncAn ADAM administration tool that synchronizes objects from Active Directory to an Active Directory Application Mode instance.
Admin Approval ModeA security feature of Windows that allows administrators to perform normal day-to-day tasks while running with a standard user token.
administrative taskAn operation that can only be performed by an administrator, not a standard user.
Administrative templatesA collection of ADMX files that provide Group Policy setting information for the items that appear under the Administrative Templates folder in the…
AdministratorAdministrator means the Administrator of the Wage and Hour Division, Department of Labor, and such authorized representatives as may be designated to…
Administrator accountOn Windows-based computers, a user account that is a member of the computerâs local Administrators group or a member of a group that is a member of…
administrator role separationThe ability to delegate local administrative permissions for a read-only domain controller (RODC) to any domain user without granting that user any user…
ADMX filesOne .admx and .adml file, joined by a common name, that are used to describe Group Policy settings in Group Policy management tools.
Advanced Group Policy ManagementAn extension to the Group Policy Management Console (GPMC) that provides change control and enhanced management for Group Policy objects (GPOs).
AdvertisementIn Systems Management Server, a notification sent by the site server to the client access points (CAPs) specifying that a software distribution program is…
AGPMAn extension to the Group Policy Management Console (GPMC) that provides change control and enhanced management for Group Policy objects (GPOs).
AGPM ServiceA Windows service that enables Advanced Group Policy Management (AGPM) clients to manage deployed and archived Group Policy objects (GPOs) and enforces…
Answer FileA file that automates Windows Setup. This file enables the configuration of Windows settings, the addition and removal of components, and many Windows…
anti-hammeringA type of software or hardware methods that increase the difficulty and cost of a key search attack on a PIN or password.
app compatThe concept of ensuring that older applications still run correctly under newer operating systems.
AppCompat databaseA database that contains a list of applications that may have potential compatibility problems and remedies.
application compatibilityThe concept of ensuring that older applications still run correctly under newer operating systems.
application compatibility databaseA database that contains a list of applications that may have potential compatibility problems and remedies.
Application Information ServiceA system service that facilitates starting applications that require one or more elevated privileges to run, such as Administrative Tasks.
application manifestAn XML document that describes requirements for an application. The application manifest can be a separate file or embedded in the applicationâs .
Application PartitionThis partition has several features such as the ability to host several instances of the same application and COM+ components on the same physical…
Application partition (in ADAM)Application directory partitions hold the data that is used by applications. Application partitions can be established during ADAM setup or at any time…
Application VerifierA graphical user interface (GUI) tool that aids IT managers and developers in testing applications on Microsoft® Windows® and the Windows Server…
AppVerifierA graphical user interface (GUI) tool that aids IT managers and developers in testing applications on Microsoft® Windows® and the Windows Server…
attributeAn attribute is a characteristic of data that sets it apart from other data, such as location, length, or type.
AttributesComponent describing object class properties.
Authenticated Internet ProtocolA protocol extension to Internet Key Exchange (IKE) that supports additional authentication mechanisms and the combination of user and computer…
Authenticated IPA protocol extension to Internet Key Exchange (IKE) that supports additional authentication mechanisms and the combination of user and computer…
authenticationThe process of validating the credentials of a person, computer process, or device.
authentication methodFor BitLocker Drive Encryption, a combination of one or more of the following elements, identified by a globally unique identifier (GUID): personal…
Authentication ProtocolThe protocol by which an entity on a network proves its identity to a remote entity.
AuthIPA protocol extension to Internet Key Exchange (IKE) that supports additional authentication mechanisms and the combination of user and computer…
AuthoritativeFor DNS, describes a DNS server hosting a zone, or a zone containing a name or record.
AuthorizationThe issuance of approval, by a credit card issuer, merchant, or other affiliate, to complete a credit card transaction.
Authorization Policies WizardA wizard that is available through TS Gateway Manager that enables you to quickly configure a Terminal Services connection authorization policy (TS CAP)…
Autounattend.xmlThe unattended answer file that is automatically detected by Windows Setup during operating system installation.
auxiliary AppCompat databaseAn additional database that is associated with the AppCompat database. The Auxiliary AppCompat database can be modified on the system and is used…
Backup Domain Controller (BDC)In a Windows 2000 domain, backup domain controllers are not required; all domain controllers are peers, and all can perform maintenance on the directory.
binary large objectA discrete packet of binary data that has an exceptionally large size, such as pictures or audio tracks stored as digital data, or any variable or table…
bindingThe ability of molecules to bind each other non-covalently because of the exact shape and chemical nature of parts of their surfaces.
BIOS boot orderA list of all potential bootable devices listed in booting order. If the boot on the first device on the list does not yield a valid boot sector, the BIOS…
BitLocker disabled modeA mode in which the disk volume is still encrypted by BitLocker Drive Encryption, but security is effectively disabled because the full-volume encryption…
BitLocker Drive EncryptionA hardware-based security feature that prevents unauthorized access to a computer by providing full-volume encryption and integrity checking of boot…
BitLocker enabled modeA mode in which BitLocker Drive Encryption is turned on and the data on the volume is transparently encrypted by BitLocker as it is written and decrypted…
BitLocker off modeA mode in which BitLocker Drive Encryption protection is turned off on a disk volume and the disk volume is not encrypted.
BLOBA discrete packet of binary data that has an exceptionally large size, such as pictures or audio tracks stored as digital data, or any variable or table…
Boot Configuration DataA data store that contains boot configuration parameters and controls how the operating system is started beginning with Windows Vista or Windows Server…
boot partitionThe partition that contains the Windows operating system and its support files.
Boot SectorThe very first sector on a hard drive which contains the computer code (boot strap loader) necessary for the computer to start up and the partition table…
boundary networkA logical portion of a network that can be accessed by computers that are in the restricted network or the secure network.
brute force attackAn attack by a malicious user or malicious software on a computer or operating system to find a secret password or a symmetric encryption key by guessing…
bufferA zone of a specified distance around coverage features. Both constant- and variable-width buffers can be generated for a set of coverage features based…
built-in AdministratorOn Windows-based computers, a user account that is a member of the computerâs local Administrators group or a member of a group that is a member of…
built-in Administrator accountOn Windows-based computers, a user account that is a member of the computerâs local Administrators group or a member of a group that is a member of…
CacheA type a computer memory that temporarily stores frequently used information for quick access.
CEIPA Microsoft program that invites customers to provide Microsoft with more detailed information about how the software is used including the type and…
certificateDigital signature combining data verification and encryption key. See PKI Digital Signature.
Certificate ServicesA software service that issues certificates for a particular certification authority (CA).