• Shuffle
    Toggle On
    Toggle Off
  • Alphabetize
    Toggle On
    Toggle Off
  • Front First
    Toggle On
    Toggle Off
  • Both Sides
    Toggle On
    Toggle Off
  • Read
    Toggle On
    Toggle Off
Reading...
Front

Card Range To Study

through

image

Play button

image

Play button

image

Progress

1/73

Click to flip

Use LEFT and RIGHT arrow keys to navigate between flashcards;

Use UP and DOWN arrow keys to flip the card;

H to show hint;

A reads text to speech;

73 Cards in this Set

  • Front
  • Back
ACE
Access control entry
ACL
Access Control lists
Activate Windows Server
Cscript C:\windows\system32\slmgr.vbs-ato
add server Core roles, components or features
Ocsetup.exe <component> /switch
ADSI
Active Directory Services Interface used by Windows PowerShell
Authentication
The mechanism by which an identity is validated by comparing secrets such as passwords provided by the user or computer to secrets maintained in the identity store
CN
Common Name
CSVDE
a command-line tool that imports or exports Active Directory objects from or to a comma-delimited text file.
DACL
Discretionary access control list
DC
Domain Controller
dll
Dynamic Link Library
DN
Distinguished name
DNS
Domain name system
Domain
An administrative unit of Active Directory. With a domain , all domain controllers replicate information about objects such as users,, groups and computers in the domain
DS Commands
Most of the DS commands take two modifies after the command itself: the object type and the object's DN
DSAdd
creates an object in the directory IE dsadd user "user DN" -samid pre-windows 2000 logon name -pwd {Password | *} -mustchpwd yes
DSGet
returns specified attributes of an object
DSMod
Modifies specified attributes of an object
DSMove
moves and object to a new container or OU
DSQuery
performs a query based on parameters provided at the command line and returns a list of matching objects
DSRM
Removes and object, all objects in the subtree beneath a container object or both
forest
the boundary of an instance of Active Directory. A forest contains one or more domains. All domains in the forest replicate the schema and configuration partitions of the directory.
Forest root domain
the first domain created in a forest
functional level
A setting that determines which features of Active Directory are enabled within a domain or forest. The functional level limits the versions of Windows that can be used by domain controllers in a domain or forest.
global catalog or partial attribute set
A partition of the Active Directory data store that contains a subset of attributes for every object in the Active Directory forest. The global catalog is used for efficient object queries and location.
Groups
provide permissions
identity store
A database of information regarding users, groups, computers, and other security principals. Attributes stored in an identity store include user names and passwords
Join a domain
Netdom join %computername% /domain:
Kerberos
A standard protocol used by Active Directory for authentication
LDAP
Lightweight Directory Access Protocol
LDIFDE
Lightweight Directory Access Protocol Data Interchange Format is a draft internet standard for file format that can perform batch imports and exports of active directory objects including users. -i import -f filename to import to or from
MMC
Microsoft Management Console
Namespace
A folder on a disk - a hierarchy that can be navigated Like a disk volume letter name or Mapped drive.
organization units
are administrative containers within Active Directory that are used to collect objects that share common requirements for administration, configuration or visibility.
OU
Organizational Unit
Providers
Namespaces are created by providers, which can be thought of as drivers. Example file system has a provider as does the registry. Powershell can access and manipulate in the namespaces of those providers.
Psdrives
Windows Powershell namespaces from any provider can be represented as PSDrives Windows PowerShell automatically creates a PS Drive for each drive latter already defined by Windows
SACL
System Access Control List
SAM ID
Security Account Manager ID
schema
a definition of the attributes and objects classes supported by Active Directory.
scripting steps
connect to the container (OU), create the object (user), populate its properties, (display name), commit the changes
set a static IPv4 configuration
Netsh interface ipv4
Site
An active Directory object that represents a portion of the network with reliable connectivity. Within a site, domain controllers replicate updates within seconds, and clients attempt to use the services within their site before obtaining the services from other sites
TCP/IP
Transmission Control Protocol/Internet Protocol
Type Adapter
Is a translator between .NET framework and Windows PowerShell. To connect to an active directory object, you submit an LDAP query string LDAP://OU=People,DC=contoso,dc=com"
UPN
User Principle Name The logon name plus the UPN suffix which by default is the domain to which you would logon ie: lflemingjm@hqda.army.mil Unique to entire forest. Email unique to the world!
WMI
Windows Management Interface
Which properties can be modified for multiple users simultaneously
General, Account, Address, Profile, Organization Tabs
What are the distinctions between name of a user object and an account
User Object Names sAMAccountName, User PrincipalName (UPN), display name and RDN. Account properties=an identity to which permissions and rights can be assigned.
sAMAcccountName Attribute
(preWindows 2000 logo name) must be unique for the ENTIRE domain
RDN
Relative Distinguished Name of an object. Must be unique in an OU.
Display Name
How users are listed in the GAL
unlock a user account
Set objUser = GetObject"LDAP://UserDN") objUser.IsAccountLocked = False objUser.SetInfo()
Distinguished Name (DN)
the most important LDAP attribute CN="josephine fleming",ou=people,dc=contoso,dc=com
SID
Security Identifier is created by the Windows 2000 security subsystem and assigned to security principal objects
Method
in the context of programming or scripting, an action performed on an object.
object
In the context of programming or scripting, a data structure that represents a system resource. Objects expose properties or attributes, methods or actions.
Delegation
Assignment of an administrative task.Delegation within Active Directory is achieved by modifying the DACL of an abject.
Saved Query
A view of Active Directory objects base on search criteria.
objectClass
IP address
An IP (Internet Protocol) address isa 32 bit binary unique number identifier for a node or host connection on an IP network. usually represented as 4 decimal values, each representing 8 bits, in the range 0 to 255 (known as octets) separated by decimal points. This is known as "dotted decimal" notation.
Group policy Member Of setting
Member of settings are cumulative
Group[ Policy by Members settings
GPOs that use the Members setting, only the member setting with the highest GPO processing will be applied and its list of members will prevail,
audit policy
A setting that configures the logging of security-related activities
Delegation
An assignment of administrative responsibility. A grant of permission to perform an administrative task
Extensible Markup Language
(XML) an abbreviated version of the Standard Generalized Markup Language (SGML) XML enables the flexible development of user-defined doc types, providing non-proprietary, persistent, and verifiable file format for the storage and transmission of text and data both on and off the Internet
Firewall
A hardware or software product designed to isolate a system or network from another network. Traditionally used to protect a private network from intrusion from the Internet. A firewall inspects inbound or outbound packets or both and determines, based on rules, which packets to allow to the other side of the firewall.
LDAP
The Primary access protocol for Active Directory.
Group Policy
used to configure the membership of groups, security settings, software management and auditing
RSoP
Resultant Set of Policies
GPO
A Group Policy Object is, by itself, just a collection of configuration instructions that will be processed by the CSEs (Client Side Extensions) of computers.
SOA
Start of Authority, and important record type in the Domain Name System.
Repadmin
Check replication consistency between replication partners, monitor replication status, display replication metadata, force replication events and knowledge consistency checker recalculation