change logThe log where the quorum resource stores data. This data is maintained by the clustering software.
Child ObjectAn object that resides in another object. A child object implies relation. For example, a file is a child object that resides in a folder, which is the…
ClaimYour request for the insurance company to pay you an amount under the terms of your policy.
claim mappingThe act of mapping, removing or filtering, or passing claims between various claim sets.
claims-aware applicationA Microsoft ASP .NET application that performs authorization based on the claims that are present in an Active Directory Federation Services (ADFS)…
ClassesComponent defining object types within Active Directory.
classic Administrative templatesA collection of .adm files that provides Group Policy setting information for the items that appear in the Classic Administrative Templates folder in the…
clear keyThe key that is stored unencrypted on the disk volume. This key is used to freely access the volume master key, and in turn, the full volume encryption…
client account partner discovery Web pageThe Web page that is used to interact with a user to determine which account partner the user belongs to when Active Directory Federation Services (ADFS)…
client authentication certificateIn AD FS, a certificate that federation server proxies use to authenticate a client to the Federation Service.
client logoff Web pageWhen Active Directory Federation Services (ADFS) performs a logoff operation, a Web page that is executed to provide visual feedback to the user that the…
client logon Web pageWhen AD FS collects client credentials, a Web page that is executed to perform the user interaction.
clusterClusters are fixed length blocks of bytes that store data for Microsoft operating systems.
cluster logA trace log of Cluster service events and activities on a node.
Cluster serviceThe essential software component that controls all aspects of server cluster or failover cluster operation and manages the cluster configuration database.
cluster storageStorage where one or more attached disks hold data used either by server applications running on the cluster or by applications for managing the cluster.
cluster-aware applicationAn application that can run on a cluster node and that can be managed as a cluster resource.
cluster-unaware applicationAn application that can run on a cluster node and be managed as a cluster resource but that does not support the Cluster API.
Cluster.exeA command-line utility that is used as an alternative to Failover Cluster Management to administer clusters from the command prompt.
clustered instanceA group of resources in a failover cluster that are handled as a unit of failover.
compliant computerA computer that meets the NAP health requirements of a network. Only NAP-enabled computers can be compliant.
ComputersA directory object such as a University owned CPU that an OU administrator supports.
Configuration partition (in Active Directory)The configuration directory partition holds information about an entire Active Directory forest, including replication scheduling and site-related…
Configuration partition (in ADAM)The configuration directory partition holds information about ADAM replication scheduling and replica sets, information that defines the other partitions…
Configuration setA set of AD LDS instances that share and replicate their configuration and schema partitions and can also be configured to share and replicate application…
consent promptA dialog box that appears when a user is requested to confirm whether an administrative process should be permitted to start.
ContainerIn the Exchange Administrator program, an object that contains other objects. For example, the Recipients container is composed of recipient objects.
contiguous namespaceA domain namespace in which all computers use the Active Directory domain name as their primary Domain Name System (DNS) suffix.
credential promptA dialog box that appears when a user is requested to confirm whether an administrative process should be permitted to start.
Cryptographic AlgorithmA mathematical function used for encryption and decryption. Most cryptographic algorithms are based on a substitution cipher, a transposition cipher, or a…
csvdeA command-line tool for importing and exporting directory contents, such as schema definitions and directory objects, that are stored as comma-separated…
Customer Experience Improvement ProgramA Microsoft program that invites customers to provide Microsoft with more detailed information about how the software is used including the type and…
data collectorAn object that defines what data will be collected from a provider (such as a counter provider or event provider).
Database layerAn architectural layer of Active Directory that isolates the upper layers of the directory service from the underlying database system by exposing…
decryptTo convert encrypted content back into its original form.
deferred enforcementA stage of deployment that allows a noncompliant computer full access to the network until a date and time after which network access becomes restricted.
delegationAn assignment of administrative responsibility to a user, computer, group, or organization. [Exchange 2003]
desktop sessionA period of time when one user is logged on to a computer. When a user logs on to a computer, the session is created.
destination computerThe computer that will be distributed to customers on which you install Windows.
device driverSoftware that enables hardware or devices (such as a printer, mouse, or keyboard) to work with your computer.
diffusionThe spontaneous movement of molecules from a region of higher concentration to a region of lower concentration.
Digest Access Protocol (DAP)A lightweight authentication protocol for parties involved in communications that are based on Hypertext Transfer Protocol (HTTP) or Simple Authentication…
digital signatureThe electronic equivalent of a handwritten signature, a digital signature is a unique block of text that verifies a user's identity and is appended to a…
DirectoryA simulated file folder or container used to organize files and directories in a hierarchical or tree-like structure.
Directory partitionA contiguous sub-tree of the directory that forms a unit of replication. A given replica is always a replica of some directory partition.
Directory ServiceBoth the directory information source and the service that makes the information available and usable.
Directory Services Restore ModeA special safe mode boot option for Windows Server domain controllers that allows you to repair or restore the Active Directory⢠service database.
Directory-enabled applicationAn application that reads, writes, or modifies data that is stored in a directory service.
disjoint namespaceA domain namespace in which at least some of the computers do not use the Active Directory domain name as their primary Domain Name System (DNS) suffix.
Distinguished Name Tag (DNT)An integer column that is maintained by the Extensible Storage Engine (ESE). Domain controllers use DNTs when they create objects, either locally or…
DomainA sub-network of servers and computers within a LAN. Domain information is useful when restoring backup tapes, particularly of email.
domain controllerIn an Active Directory forest, a server that contains a writable copy of the Active Directory database, participates in Active Directory replication, and…
Domain ControllersActive Directory core service providers, DCs in the same domain share the same information.
Domain Name System (DNS)(DNS)Hierarchical distributed database used for name/address translation and client-server rendezvous.
Domain Naming MasterThe master service that controls and authorizes domain naming within the forest.
Domain Specific ContentsEvery object that is defined solely within the scope of a particular domain.
Domain TreeIn DNS, the inverted hierarchical tree structure that is used to index domain names.
drive sanitationThe forced recovery of a BitLocker-protected volume through the removal of all the key binary large objects (BLOBs) that could have decrypted the disk.
driverA driver is a computer program that controls various devices such as the keyboard, mouse, monitor, etc.
DSMLSee definition for: Directory Services Markup Language (DSML)
EFIA type of interface between a computer, firmware, hardware, and the operating system. EFI defines a new partition style called GUID partition table (GPT).
EFSElectronic Filing System (for patent applications) supports secure electronic filing of Patent application documents via the Internet
elevated privilegeA privilege to access system resources and objects outside of the standard access control checks.
elevation promptA dialog box that appears when a user is requested to confirm whether an administrative process should be permitted to start.
encryptTo programmatically disguise content to hide its substance.
Encrypting File SystemA Microsoft file-based encryption technology that enables users to encrypt files and folders on NTFS volumes.
exemption certificateAn X.509 certificate that serves to exempt computers from NAP health checks. Server computers can use exemption certificates to participate in…
Explain textText that provides customers with information about the behavior of a Group Policy setting.
extended partitionA type of partition that you can create only on basic master boot record (MBR) disks.
Extensible Firmware InterfaceA type of interface between a computer, firmware, hardware, and the operating system. EFI defines a new partition style called GUID partition table (GPT).
Extensible Storage Engine (ESE)The Active Directory database engine. ESE (Esent.dll) is an improved version of the Jet database that is used in Microsoft Exchange Server versions 4.
external keyA file that contains information to access cryptographically locked data, which is stored away from the system, such as on a USB flash drive.
external key fileA file that contains the external key and is stored on an external media device.
failbackIn a failover cluster or server cluster, the process of returning a clustered service or application to its preferred node after the node has failed and…
failback policyA set of parameters that an administrator can set for a failover cluster or server cluster that affect failback operations.
failedA state that applies to a resource or a node in a failover cluster or server cluster.
failoverA cluster's ability to redirect requests from one server to another. Failover occurs when a user tries to access an application on an unavailable server…
failover clusterA group of computers, known as nodes, or terminal servers working together as a single system to ensure that mission-critical applications and resources…
Failover Cluster Management snap-inA Microsoft Management Console snap-in (graphical user interface) through which you can configure a failover cluster and its nodes, its clustered services…
FeatureA large, complex artifact, or part of a site, such as a hearth, cairn, housepit, rock alignment, or activity area.
federated applicationA Web-based application that is AD FS-enabled, meaning that it can be accessed by federated users.
federated userA user whose account resides in an account partner organization and who can access federated applications that reside in a resource partner organization.
federationA pair of realms or domains that have established a federation trust.
federation serverA computer that has been configured to host the Federation Service component of Active Directory Federation Services (AD FS).
federation server proxyA computer that has been configured to host the Federation Service Proxy component of Active Directory Federation Services (AD FS).
Federation ServiceAn installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server.
Federation Service ProxyAn installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server proxy.
File and Registry VirtualizationA feature that allows standard users to run applications that normally write to per-computer files and registry keys.
file/registry virtualizationA feature that allows standard users to run applications that normally write to per-computer files and registry keys.
filtered access tokenAn access token with the least administrative privileges required for the session.
filtered groupA local security group that is removed from an access token. When User Account Control (UAC) creates the filtered access token, the filtered groups are…
FirewallA set of related programs that protect the resources of a private network from users from other networks.