Glossary terms from course 4, module 4
AAA (authentication, authorization, accounting): The services that the directory services provide to all the computers within a company or organization
Active directory (AD): The Microsoft alternative to directory services that offers customization and added features for the Windows platform
Active directory users and computers (ADUC): The client tools that are used for accessing and administering a directory server
Advanced group policy management (AGPM): A set of add-on tools from Microsoft that gives some added provision control abilities in GPMC
Bind operation: The operation which authenticates clients to the directory server
Central management: A central service that provides instructions to all of the different parts of my IT infrastructure
Change management process: The process to notify others in the organization about the changes that you are about to make
Computer configuration: Contained within a Group Policy Object (GPO)
Configuration management: The creation of rules about how things should work in your organization, such as printers, configure software, or mounting network file systems
Default domain control policy: One of the two GPOs that are created when a new Active Directory domain has been made
Delegation: The administrative tasks that you need to perform a lot as a part of your day to day job but you don’t need to have broad access to make changes in AD
Directory Access Protocol (DAP): A protocol that is included in the X.500 directory standard from 1988
Directory Information Shadowing Protocol (DISP): A protocol that is included in the X.500 directory standard from 1988
Directory Operational Bindings Management Protocol (DOBMP): A protocol that is included in the X.500 directory standard from 1988
Directory server: The server that contains a lookup service that provides mapping between network resources and their network addresses
Directory services: A lookup service contained in a network server that provides mapping between network resources and their network addresses
Directory System Protocol (DSP): A protocol that is included in the X.500 directory standard from 1988
Distribution group: A group that is only designed to group accounts and contacts for email communication
DNS records: A DNS request for the SRV records matching the domain that it’s been bound to
Domain admin: The administrators of the Active Directory domain
Domain computers: All the computers joined to the domain except domain controllers
Domain controllers (DC): The service that hosts copies of the Active Directory database
Domain local: The tool used used to assign permission to a resource
Domain users: A group that contains every user account in the domain
Enterprise admin: The administrators of the Active Directory domain that has permission to make changes to the domain that affect other domains in a multi-domain forest
Enterprise mobility management (EMM): A system that can create and distribute policies and MDMs
Fast logon optimization: The group policy engine that applies policy settings to a local machine may sacrifice the immediate application of some types of policies in order to make logon faster
Flexible single-master operations (FSMO): The single domain controller that has been tasked with making changes to the AD database that can only be made by one DC at a time
Forest: The hierarchy above a domain that contains multiple domains, allowing accounts to share resources between domains that are in the same forest
Functional levels: The different versions of Active Directory, a functional level that describes the features that it supports
Global: The tool that is used to group accounts into a role
Group policy management console (GPMC): The tools used for creating and viewing a group policy object
Group policy objects (GPO): The ways to manage the configuration of Windows machines, referring to the objects that represent things in your network that you want to be able to reference or manage
Group policy settings reference: A spreadsheet that details the GPO policies and preferences that are available and where to find them
Group scope: The way that group definitions are replicated across domains
Import: Moving a backup of the test example policy to the production example policy
Kerberos: A network authentication protocol that uses tickets to allow entities to prove their identity over potentially insecure channels to provide mutual authentication
LDAP data interchange format: The tool that allows you to authenticate, add, remove users, groups, computers and so on in a directory service
LDAP Entry: A collection of information that’s used to describe something
LDIF files: A text file that lists attributes and values that describe something
Lightweight Directory Access Protocol (LDAP): An open industry-standard protocol for accessing and maintaining directory services; the most popular open-source alternative to the DAP
Linked: A GPO that all of the computers or users under a domain, site, or OU will have a policy applied
MDM policy: The profiles that contains settings for the device
MDM profile: The policies that contains settings for the device
One-way cryptographic hash: The method used by AD to store passwords
OpenLDAP (lightweight directory access protocol): An open source and free directory service
Organizational units (OU): A hierarchical model of objects and containers that can contain objects or more organizational units
Parent group: Groups that are principal groups and contain other groups
PHPLDAPadmin: A tool to manage OpenLDAP
Policies: Settings that are reapplied every few minutes, and aren’t meant to be changed even by the local administrators
Precedence: When computers are processing the Group Policy Objects that apply to them, all of these policies will be applied in a specific order based on a set of precedents rules
Read-write replicas: Domain controllers in the Active Directory network that each have a complete copy of the AD database and are able to make changes to it
Remote wipe: A factory reset that you can trigger from your central MDM rather than having to do it in person on the device
Replication: the store directory data is copied and distributed across a number of physically distributed servers but still appears as one unified data store for querying and administering
Replication failure: A reason that a GPO might fail to apply as expected
Reset: When an SysAdmin restores or resets the password of a user
Restart: A command that will let the machine reboot to complete a domain join
Resultant set of policy (RSOP): The policy that forms when all of the group policies have been grouped together for a specific machine and apply precedence rules to them
Role-based access control (RBAC): The process of changing a persons group that they are a part of when they have changed roles within a company to limit or change their access to resources
RSOP report: The process of troubleshooting group policy and comparing what you expect to be applied to a computer and the resultant set of policy report
Security account manager (SAM): A database in windows that stores user names and password
Security filtering: A tool to make group policies apply more selectively
Security group: One of the two categories that groups in Active Directories can be part of, they can contain user accounts, computer accounts or other security groups
Security principal: Any entity that can be authenticated by the system, such as a user account, a computer account, or a thread or process that runs in the security context of a user or computer account
Service discovery: One of the services that the domain controller provides to the clients
Simple authentication and security layer (SASL): The authentication method that can employ the help of security protocols like TLS, it requires the client and the directory server to authenticate using some method
SRV records: A service record used to define the location of various specific services
Systems administrator (sysadmin): A person who works only in system administration, configuring servers, monitoring the network, provisioning, or setting up new users in computers and taking responsibility of systems
Universal: The tool that is used to group global roles in a forest
User configuration: Contained within a Group Policy Object (GPO)
User Groups: The management of resources on a computer and on a network through organizing user accounts into various groups
Windows management instrumentation (WMI): The container that is used to define powerful targeting rules for your GPO
Windows registry: A hierarchical database of settings that Windows, and Windows applications, use for storing configuration data
WMI filter: A tool to make group policies apply more selectively on the configuration of the computer
Work group computer: A Windows computer that isn’t joined to a domain
X.500 directory: The agreed upon directory standard that wa approved in 1988 that includes, DAP, DSP, DISP, DOP, DAP, and LDAP