Multi-master replication (in ADAM)A feature of Active Directory Application Mode that provides and maintains copies of the directory across multiple servers in a configuration set.
NAP agentA client-side service that collects and manages health information. The NAP agent mediates communication of client health status between installed system…
NAP clientA computer that supports the NAP platform and can provide statements of health (SoHs) to a network access device.
NAP ECA component in a NAP client architecture that integrates with network access technologies, such as DHCP, VPN, 802.1X, IPsec, and TS Gateway.
NAP enforcement clientA component in a NAP client architecture that integrates with network access technologies, such as DHCP, VPN, 802.1X, IPsec, and TS Gateway.
NAP enforcement pointA server or network access device that uses NAP or can be used with NAP to require the evaluation of a NAP clientâs health state and provide…
NAP enforcement serverA component of the NAP architecture that enforces restricted network access for noncompliant NAP clients.
NAP EPA server or network access device that uses NAP or can be used with NAP to require the evaluation of a NAP clientâs health state and provide…
NAP ESA component of the NAP architecture that enforces restricted network access for noncompliant NAP clients.
NAP health policy serverA server running NPS that evaluates NAP client health status. The NAP health policy server uses health policies and network policies to evaluate…
native modeAn operating mode of Exchange Server 2003 when the Exchange organization consists of only Exchange 2003 or Exchange 2000 servers.
Network Access ProtectionA set of operating system components that can help protect access to a private network by enforcing health policies.
Network Level AuthenticationAn authentication method that completes user authentication before you establish a Remote Desktop connection and the logon screen appears.
network policyA set of conditions, settings, and constraints that determine who can connect to a network. Network policy is configured by a network administrator.
Network Policy ServerThe Microsoft implementation of a Remote Authentication Dial-In User Service (RADIUS) server and proxy.
network resourceAn individual computer on an internal corporate or private network that users can connect to through a TS Gateway server.
Network Service accountA predefined local account that is used to start a service and provide the security context for that service.
network userA user that is accessing resources on a remote system. A network user may not have a UI or desktop on the remote computer.
nodeAny device connected to network. PCs, servers, and printers are all nodes on the network.
noncompliant computerA computer that does not meet the NAP health requirements that are defined for a network.
NPSThe Microsoft implementation of a Remote Authentication Dial-In User Service (RADIUS) server and proxy.
objectAn entity such as a file, folder, shared folder, printer, or Active Directory object, described by a distinct, named set of attributes.
Object identifier (OID)A number that identifies an object class or attribute. Object identifiers (OIDs) are organized into an industry-wide global hierarchy.
object protection levelThe integrity level of an object, stored in a token or an objectâs system access control list (SACL).
OEM Preinstallation KitA set of tools, documentation, and samples that enable OEMs to preinstall Windows efficiently on new computers according to the terms of the OEM Licensing…
OfflineWhen computers and other devices are not connected to the network.
one-way trustA trust relationship between two domains in which only one of the two domains trusts the other domain.
one-way trust relationshipA trust relationship between two domains in which only one of the two domains trusts the other domain.
OnlineWhen computers and other devices are connected to the network.
oobe.xml fileA content file that can be used to store content to display in the customizable areas of Windows Welcome, Welcome Center, and the Get Connected Wizard.
operating system volumeA volume that contains an operating system (for example, Windows Vista) that can be loaded by Windows Boot Manager.
Operation Masters (OM)AD services that manage requests for specific information changes at either the forest or the domain level.
OPKA set of tools, documentation, and samples that enable OEMs to preinstall Windows efficiently on new computers according to the terms of the OEM Licensing…
organization claimA claim in intermediate or normalized form within an organization's namespace.
Organizational UnitAdministration Boundary, container designed as object repositories. OU contains AD objects and their properties, and data, provide groupings that can be…
Organizational unit (OU)A container object that is an Active Directory administrative partition. OUs can contain users, groups, resources, and other OUs.
OU (organizational unit)An Active Directory container object used within domains. An organizational unit is a logical container into which users, groups, computers, and other…
Over The ShoulderA version of elevation prompt that allows an administrator to enter administrative credentials to allow a process to run with the full access token of the…
OwnerThe only security principal who has an inherent right to allow or deny permission to access an object.
owner passwordA password that the user sets when the Trusted Platform Module (TPM) is enabled.
packageA group of files that modify Windows features. Package types include service packs, security updates, language packs, and hotfixes.
Parent ObjectAn object in which another object resides. For example, a folder is a parent object in which a file, or child object, resides.
Parent-child trust relationshipThe two-way, transitive trust relationship that is established when you add a domain to an Active Directory tree.
PartitionA partition is an individual section of computer storage media such as a hard drive.
Partition TableThe partition table indicates each logical volume contained on a disc and its location.
passive clientA Hypertext Transfer Protocol (HTTP) browser, which is capable of broadly supported HTTP, that can use cookies.
Password Replication PolicyA set of access control lists (ACLs) that determine what credentials can or cannot be replicated on a read-only domain controller (RODC).
Password Settings ContainerAn object class in the Active Directory Domain Services (AD DS) schema that is created by default under the System container in the domain.
Password Settings objectAn Active Directory object that is stored in the Password Settings Container. The Password Settings object holds the attributes of a certain fine-grained…
pausedA state that applies to a node in a failover cluster or server cluster. The node is a fully active member in the cluster but cannot accept new clustered…
PCRA laboratory method used to make many copies of a specific DNA sequence. Also called polymerase chain reaction.
PendingThe status of a patent application that occurs before either an application is abandoned (withdrawn) or a patent issues.
Per Device licensing modeA mode in which the terminal server requests a TS Per Device client access license (TS Per Device CAL) from a Terminal Services license server so that a…
Per User licensing modeA mode in which the terminal server requests a TS Per User client access license (TS Per User CAL) from a Terminal Services license server so that a user…
Performance Logs and AlertsA Distributed Component Object Model (DCOM) API that enables application programmers to log system performance and diagnosis data, and to generate alert…
perimeter networkAn Internet Protocol (IP) network segment that contains resources, such as Web servers and virtual private network (VPN) servers, that are available to…
permissionsAuthorization to perform operations associated with a shared resource, such as a file, directory, or printer.
personal identification numberA unique and secret identification code similar to a password that is assigned to an authorized user and used to gain access to personal information or…
PINNoncancerous growth of cells lining the internal and external surfaces of the prostate gland.
PLA(1) Peoples Liberation Army (Chinas army). (2) Patent License Agreement.
platform configuration registerA register inside a Trusted Platform Module (TPM). This register is sufficiently large to contain a hash (currently only SHA-1).
Plug and PlayA type of device, such as a game controller or printer, that automatically works when you connect it to your computer.
PolicyThe contract form issued by the company to explain the coverage provided. It is a legal document.
possible ownerA node in a failover cluster or server cluster that can run a specific resource.
pre-staged clientA computer account object that is created within Active Directory Domain Services (AD DS) before the operating system of the computer is installed.
primary DNS suffixThe Domain Name System (DNS) suffix that a computer uses to identify the DNS domain to which it belongs.
Primary Domain Controller Emulator (PDC)PDC provides backward compatibility to Windows NT. In native forest, manages password changes and synchronizes time between DCs.
primary partitionA type of partition created on basic disks that can host an operating system and functions as though it were a physically separate disk.
privilege isolationA window manager subsystem that blocks applications at a lower UI privilege level from sending messages to or hooking threads belonging to processes with…
process access tokenA data structure that contains authentication and authorization information for a user.
protection levelThe Microsoft implementation of an integrity level. In particular, a protection level, refers to an integrity label that contains only level information…
PSOAn Active Directory object that is stored in the Password Settings Container. The Password Settings object holds the attributes of a certain fine-grained…
quiet modeThe mode of a command-line application where it does not display confirmation messages or any other user interface items that normally appear on screen.
quorumThe number of Senators that must be present for the Senate to do business. The Constitution requires a majority of Senators (51) for a quorum.
quorum configurationSettings in a failover cluster that determine the point at which too many failures will stop the cluster from running.
quorum logThe log where the quorum resource stores data. This data is maintained by the clustering software.
quorum resourceFor a server cluster, the quorum-capable resource selected to maintain the configuration data necessary for recovery of the cluster.
RADIUSHorizontal distance from the center of rotation.
Recovery ConsoleA command-line interface that provides a limited set of administrative commands that are useful for repairing a computer.
recovery keyA key that is used for recovering data that is encrypted on a BitLocker volume. This key is cryptographically equivalent to a startup key.
recovery logThe log where the quorum resource stores data. This data is maintained by the clustering software.
recovery modeA mode in which BitLocker Drive Encryption prevents access to the encrypted drive, either because the system components have changed or because it needs…
recovery passwordFor BitLocker Drive Encryption, a numerical password that consists of 48 digits divided into 8 groups.
recovery password fileA BitLocker Drive Encryption file that uses the naming convention: .bek (including the BitLocker .
Relative Distinguished name (RDN)The part of the name of an object that is an attribute of the object itself. The attribute that provides the RDN for an object is referred to as the…