relative IDThe portion of a security identifier (SID) that identifies a user or group in relation to the authority that issued the SID.
Relative ID (RID)The master service that is responsible for the assignation of relative IDs to other domain controllers within the domain.
relative identifierThe portion of a security identifier (SID) that identifies a user or group in relation to the authority that issued the SID.
Remote Authentication Dial-In User ServiceA security authentication protocol based on a client/server model. RADIUS is widely used by Internet service providers (ISPs) for authenticating and…
Remote DesktopA Windows feature that allows users to connect remotely to a computer and access programs, files, and network resources as though they were sitting at the…
Remote Desktop ConnectionThe client software that enables users to connect to a remote computer or terminal server that has the Remote Desktop feature enabled.
Remote Desktop Web ConnectionA feature of Windows that when deployed on a Web server, allows a user to connect to terminal servers and other computers through a Web browser, even if…
Remote DesktopsA snap-in that allows users to manage Remote Desktop connections to terminal servers and computers that are running Windows Server.
Remote Procedure Call (RPC)(RPC)A Remote Procedure Call (RPC) is a communication mechanism which allows one UNIX process to communicate with another UNIX process.
Remote Server Administration ToolsA feature in Windows Server that enables remote management of Windows Server operating systems by allowing users to open and run management tools on a…
ReplicaA special copy of an IBM® Lotus® Notes® application that, because it shares a replica ID with the original application, can exchange information with…
ReplicationThe in vivo synthesis of double-stranded DNA by copying from a single-stranded template.
requested execution levelAn attribute of an application that indicates which type of access token to use when the application is started.
resourceData, metadata, a collection of data, or a collection of metadata accessed as a content item. Examples: a document, a database table, a content class.
resource accountA single security principalâusually a user accountâthat is created in Active Directory Domain Services (AD DS) and used to map to a single…
resource DLLA dynamic-link library (DLL) that contains instructions for managing one or more types of cluster resources in a failover cluster or server cluster.
resource federation serverThe federation server in the resource partner organization. The resource federation server typically issues security tokens to users based on a security…
resource federation server proxyThe federation server proxy that is located in the perimeter network of the resource partner organization.
resource groupIn AD FS, a single security group, which is created in Active Directory, that incoming group claims (AD FS group claims from the account partner) are…
Resource Hosting SubsystemA cluster software component that provides a communication, monitoring, and processing layer between the Cluster service and one or more clustered…
Resource MonitorA component of Windows Reliability and Performance Monitor that displays real-time CPU, memory, disk, and network performance information collected from…
resource partnerA federation partner that trusts the Federation Service to issue claims-based security tokens for Web-based applications (that is, applications in the…
Resource PublishingThe process of making an object visible and accessible to users in a Windows 2000 domain.
resource typeClass of resources (such as print spooler, physical disk, and file share) that is organized by a failover cluster or server cluster.
restricted access tokenAn access token with restricted access to securable objects or performing privileged tasks.
restricted networkA logical portion of the network where client computers that either do not meet health policy or are not capable of asserting that they meet health policy…
restricted tokenAn access token with restricted access to securable objects or performing privileged tasks.
RHSA cluster software component that provides a communication, monitoring, and processing layer between the Cluster service and one or more clustered…
RIDThe portion of a security identifier (SID) that identifies a user or group in relation to the authority that issued the SID.
RODCA domain controller that has read-only copies of directory partitions.
RODC filtered attribute setA dynamically configured set of attributes that are not replicated to a read-only domain controller (RODC).
RSATA feature in Windows Server that enables remote management of Windows Server operating systems by allowing users to open and run management tools on a…
run levelAn attribute of an application that indicates which type of access token to use when the application is started.
SA(1) Situation Awareness (2) Secretary of the Army.
SASLSee definition for: Simple Authentication and Security Layer (SASL)
ScalabilityThe capacity of a system to expand without requiring major reconfiguration or re-entry of data.
SchemaA set of rules or conceptual model for data structure and content, such as a description of the data content and relationships in a database.
Schema cacheAn in-memory copy of the schema on the domain controller. To improve performance on schema operations (such as new object validation), each domain…
Schema MasterThe domain controller assigned to control all updates to the schema within a forest. At any time, there can be only one schema master in the forest.
Schema partitionThe schema directory partition holds the definitions for the type of data that can be held by the directory store.
SealTo mark a document with a seal; to authenticate or make binding by affixing a seal. Court seal, corporate seal.
secure desktopA desktop that is isolated from other processes running on the system. The secure desktop increases the security of the elevation prompt.
Secure Hash AlgorithmAn algorithm that generates a 160-bit hash value from an arbitrary amount of input data.
Secure NetworkA logical portion of a network that client computers can access if they either meet corporate health policy or are exempt from meeting corporate health…
Secure Sockets Layer (SSL)A protocol that provides secure data communication through data encryption. This protocol enables authentication, integrity, and data privacy over…
security associationA combination of identifiers, which together define Internet Protocol security (IPsec), that protects communication between sender and receiver.
security contextThe security attributes or rules that are currently in effect. For example, the rules that govern what a user can do to a protected object are determined…
Security descriptorA data structure that contains security information associated with a protected object.
Security GroupsGroups that can be used to organize users and domain objects, thus simplifying administration.
Security Identifier (SID)In Windows-based systems, a unique value that identifies a user, group, or computer account within an enterprise.
Security packageThe software implementation of a security protocol. Security packages are contained in security support provider dynamic-link libraries (DLLs) or in…
Security principalIn Windows-based systems, a user, group, or computer that is automatically assigned a security identifier (SID) to control access to resources.
Security protocolA specification that defines security-related data objects and rules about how the objects are used to maintain security on a computer system.
Security Support Provider (SSP)A dynamic-link library (DLL) that implements the Security Support Provider Interface (SSPI) by making one or more security packages available to…
Security Support Provider Interface (SSPI)A common interface between transport-level applications, such as Microsoft Remote Procedure Call (RPC), and security support providers (SSPs), such as…
Security TemplateA physical file representation of a security configuration that can be applied to a local computer or imported to a Group Policy object in Active…
security tokenA cryptographically signed data unit that expresses one or more claims.
security token serviceA Web service that issues security tokens. A security token service makes assertions based on evidence that it trusts to whoever trusts it.
server authentication certificateIn AD FS, a certificate that AD FS-enabled Web servers, federation servers, and federation server proxies use to secure Web services traffic for…
server clusterA group of computers, known as nodes, that work together as a single system to ensure that mission-critical applications and resources remain available to…
server farmA centralized grouping of network servers maintained by an enterprise or, often, an Internet service provider (ISP).
Server ManagerAn expanded Microsoft Management Console (MMC) component available in Windows Server that provides a single source for securely deploying and managing…
Server Manager command line toolA command line tool that automates the deployment of roles and features on computers running Windows Server.
server poolA group of computers, known as nodes, or terminal servers working together as a single system to ensure that mission-critical applications and resources…
ServerManagerCmd.exeA command line tool that automates the deployment of roles and features on computers running Windows Server.
service accountA Windows Server 2003 or Windows 2000 user account that is used to run some Exchange services. [Exchange 2003]
Service Principal Name (SPN)A way of referring to a service principal. SPN structures generally follow Internet Engineering Task Force (IETF) naming conventions, and they often…
SHAA client software component that declares a client's health state (by providing a statement of health) to a NAP agent.
SHA-1Secure Hash Algorithm, for computing a condensed representation of a message or a data file specified by FIPS PUB 180-1.
SHVA server software counterpart to a system health agent (SHA). A system health validator verifies the statement of health (SoH) made by its respective SHA.
SID filter quarantiningA strict form of security identifier (SID) filtering that is applied to external trust relationships by default, which prevents any SIDs that are not part…
SID filteringA security enhancement that is applied to all Active Directory trust relationships to reduce the possibility of escalation of privilege attacks from…
single sign-onA process that enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to any computer in the…
Single-master operationsActive Directory operations that are single-master, that is, not permitted to occur at different places in the network at the same time.
SiteIn archeology, any location of past human activity.
Site LinkAn object in Active Directory that contains information about the link between two Active Directory sites.
Site topologyDetermines how each of the database containers will be linked to the others for replication purposes.
Slack SpaceA form of residual data, slack space is the amount of on-disk file space from the end of the logical record information to the end of the physical disk…
SOHA declaration from a client computer that asserts the computer's health status.
SoHRThe validation of a statement of health (SoH) that a system health validator (SHV) produces and sends to the NAP administration server.
split access tokenA combination of full access token and filtered access token linked together by the local security authority (LSA) component of the operating system.
staged RODC installationA process in which a read-only domain controller (RODC) is installed in two stages.
standard userA user account in the Users group that has a full privilege access token. The standard user is not an administrator and is not a member of any local…
Standard User AnalyzerAn add-in for AppVerifier that predicts whether an application will perform correctly when run as a standard user or as an administrator with a filtered…
startup keyA key that is stored on a USB flash drive that must be inserted each time the computer starts.