ForestTerrestrial ecosystem (biome) with enough average annual precipitation (at least 76 centimeters or 30 inches) to support growth of various species of…
Generic AccountsNamed according to function rather than individual. Use for 3 activities: Testing, Development, Training.
Generic ApplicationA resource type in a failover cluster or server cluster that supports an application that was not originally designed to run on a cluster.
Generic ScriptA resource type in a failover cluster or server cluster that supports an application controlled by a script that runs in Windows Script Host.
Generic ServiceA resource type in a failover cluster or server cluster that supports a service that was not originally designed to run on a cluster.
Global CatalogA directory database that applications and clients can query to locate any object in a forest.
Global Catalog (GC)The global catalog contains a partial replica of every Windows 2000 /Windows 2003 domain in the directory.
Global Catalog ServerA Windows 2000 / Windows 2003 domain controller that holds a copy of the global catalog for the forest.
global system keyA tool used to configure the startup key, a random, 128-bit, symmetric cryptographic key created at system startup and used to encrypt all of the user`s…
globally unique identifierA 16-byte value generated from the unique identifier on a device, the current date and time, and a sequence number.
Globally Unique Identifier (GUID)A 16-byte value generated from the unique identifier on a device, the current date and time, and a sequence number.
group(also referred to as a Technology Center or TC) - a unit of several Group Art Units in the mechanical, electrical, chemical or design area, managed by one…
Group membershipsThe groups to which a user account belongs. Permissions and rights granted to a group are also provided to its members.
Group PolicyAn administrative tool for managing user settings and computer settings across a network.
Group Policy containerAn object that is stored in Active Directory Domain Services and that is associated with a given Group Policy object.
Group Policy Management EditorThe name of the window for the editor snap-in that accompanies the Group Policy Management Console.
Group Policy ObjectA collection of Group Policy settings, stored at the domain level as a virtual object that consists of a Group Policy container and a Group Policy…
Group Policy object (GPO)A logical concept that is used to represent a single collective set of computer and/or user policies.
Group Policy Object EditorThe Microsoft Management Console (MMC) snap-in that is used to edit Local Group Policy settings.
Group Policy templateA collection of files that contains Group Policy information and that is stored on the SYSVOL share.
GUIDA 16-byte value generated from the unique identifier on a device, the current date and time, and a sequence number.
hammeringA key search attack in which an unauthorized user guesses at a PIN or password many times.
HCAPA protocol used by Access Control Server (ACS) to send and receive statements of health to and from other NAP infrastructure components.
HCEPThe protocol used by the NAP agent to request health certificates from the Health Registration Authority (HRA) and to prove the health of a client…
health certificateAn X.509 certificate that asserts the health of a client computer. Client computers can use this certificate to prove their identities and health through…
Health Certificate Enrollment ProtocolThe protocol used by the NAP agent to request health certificates from the Health Registration Authority (HRA) and to prove the health of a client…
health policyA collection of software requirements, security update requirements, and required configuration settings for NAP client computers.
Health Registration AuthorityA component of Network Access Protection (NAP) that validates statements of health (SoHs) and approves the issuance of a health certificate to clients…
health requirement serverA software component that communicates with a Network Policy Server (NPS) and provides information that system health agents (SHAs) use to validate…
hibernationA power-saving feature that saves everything in memory on disk, turns off your monitor and hard disk, and then turns off your computer.
hibernation fileA file created during hibernation that contains all CPU memory and registers information.
Hierarchical namespaceAny namespace that is hierarchically structured and provides rules that allow the namespace to be partitioned.
Host Credentials Authorization ProtocolA protocol used by Access Control Server (ACS) to send and receive statements of health to and from other NAP infrastructure components.
HotFixA single, cumulative package composed of one or more files used to address a problem in a product.
hotfix packageA single, cumulative package composed of one or more files used to address a problem in a product.
HRAA component of Network Access Protection (NAP) that validates statements of health (SoHs) and approves the issuance of a health certificate to clients…
IBSIntegrated Bridge System, a part of the Integrated Control System (ICS) for US naval ships.
ICTA window that, by default, opens immediately after operating system installation is complete and each time a member of the Administrators group logs on to…
IKEA protocol that establishes the security association and shared keys necessary for computers to communicate by using Internet Protocol security (IPsec).
ILOne of a group of related proteins made by leukocytes (white blood cells) and other cells in the body. ILs regulate immune responses.
image-based setupA process that uses installation technologies that install Windows images (.wim files).
Infrastructure MasterManages two critical tasks: Update of references from objects in its domain to objects in other domains and update and modification of group members…
inheritanceThe transmission of genes and phenotypes from generation to generation.
Initial Configuration TasksA window that, by default, opens immediately after operating system installation is complete and each time a member of the Administrators group logs on to…
integrity checkingA task that the Trusted Platform Module (TPM) performs by confirming that the SHA-1 computed hash of each system component that runs during boot matches…
integrity levelA number that represents how trustworthy a particular process, application, or object is.
integrity SIDA security identifier (SID) that represents an integrity level. An objectâs system access control list (SACL) and access token can contain one or…
interactive desktopA Windows desktop session running with an interactive userâs access token applied.
interactive logonThe process of logging on to a local computer by using a keyboard.
interactive userA user that is interacting directly with the user interface of the computer, by using the local console, Terminal Services, or Remote Desktop.
Internet Key ExchangeA protocol that establishes the security association and shared keys necessary for two parties to communicate with Internet Protocol security (IPSec).
KerberosA security system that authenticates users. Kerberos doesn’t provide authorization to services or databases; it establishes identity at logon, which is…
key protectorA blob (binary large object) that is used to restrict access to a BitLocker-protected disk.
key search attackAn attack by a malicious user or malicious software on a computer or operating system to find a secret password or a symmetric encryption key by guessing…
Knowledge Consistency Checker (KCC)A built-in service that runs on all domain controllers and automatically establishes connections between individual machines in the same site.
LDAPA protocol for accessing directory information. LDAP or Lightweight Directory Access Protocol is used by browsers and email clients to look up email…
ldifdeA command-line tool for importing and exporting directory contents to and from Active Directory / ADAM, such as schema definitions and directory objects…
LDPldp.exe is a graphical user interface (GUI) tool for general administration of a Lightweight Directory Access Protocol (LDAP) directory service.
legacy applicationWhen used in the context of the User Account Control (UAC) infrastructure, an application that does not have an application manifest that indicates…
license serverA computer on which the TS Licensing role service is installed. A license server issues TS CALs to users or devices that connect to a terminal server.
license server discovery modeA mode that is configured on the terminal server that determines which method to use to find (âdiscoverâ) a Terminal Services license server in…
Lightweight Directory Access Protocol (LDAP)An industry-standard protocol established by the Internet Engineering Task Force (IETF) that allows users to query and update information in a directory…
Lightweight Directory ServicesA stand-alone directory service that is designed specifically for use with directory-enabled applications.
Local Group Policy EditorThe Microsoft Management Console (MMC) snap-in that is used to edit Local Group Policy settings.
locator serviceIn a distributed system, a feature that allows a client to find a shared resource or server without providing an address or full name.
locked modeA mode in which BitLocker Drive Encryption prevents access to the encrypted drive, either because the system components have changed or because it needs…
logical driveA volume that you create within an extended partition on a basic master boot record (MBR) disk.
logon sessionA period of time when one user is logged on to a computer. When a user logs on to a computer, the session is created.
low integrity access tokenA filtered access token that is created with a low integrity level. This access token is used by Internet Explorer Protected Mode, but can also be used by…
MAC(1) OBSOLETE. Military Airlift Command. See AMC. (2) Maintenance Allocation Chart.
Magic PacketA broadcast frame used with wake-on-LAN (WOL) technology. The data that is contained in a Magic Packet is the defined constant as represented in…
Mandatory Integrity ControlA security feature that requires a process to have an integrity level equal to or higher than the integrity level of an object in order to obtain some…
manifestAn XML document that describes requirements for an application. The application manifest can be a separate file or embedded in the application's .exe file.
MBRThe first sector on a hard disk, which begins the process of starting the computer.
Message Authentication CodeAn algorithm that allows a receiver to ensure that a block of data has retained its integrity from the time it was sent until the time it was received.
Microsoft DigestA security support provider (SSP) that implements the Digest Access protocol. Microsoft Digest provides a simple challenge-response mechanism for…
Microsoft Management ConsoleA Microsoft management display framework that provides a unified view for administering multiple integrated network applications.
mixed modeThe default operating mode of Exchange when it is installed. Mixed mode allows Exchange 2003 and Exchange 2000 servers and servers running earlier…
MMCA Microsoft management display framework that provides a unified view for administering multiple integrated network applications.
msDS-ResultantPSOA user object attribute that can be queried to retrieve the distinguished name of the Password Settings object (PSO) that is applied to the user.
MUI PackA set of technologies that enable a multilingual Windows installation.