Mcts Ch6 & 7 Key Terms

Front 1

An applet for managing users that is available only from the command line. Some options in this applet are not available in other user management utilities.

Back 1

advanced User Accounts applet

Front 2

The type of user account that is made a member of the Administrators local group and has full rights to the system.

Back 2

administrator account

Front 3

The built-in account that is created during installation and which has full rights to the system. This account cannot be deleted or removed by the Administrators
group.

Back 3

Administrator account

Front 4

Groups that are automatically created for each Windows 7 computer and stored in the SAM database.

Back 4

built-in local groups

Front 5

Domain credentials that are stored in Windows 7 after a user has logged on to a domain. Cached credentials can be used to log on when a domain controller cannot be contacted.

Back 5

cached credentials

Front 6

The profile that is copied when new user profiles are created.

Back 6

default profile

Front 7

A network where security information is stored centrally in Active Directory.

Back 7

domain-based network

Front 8

Allows multiple users to have applications running at the same time. However, only one user can be using the console at a time.

Back 8

Fast user switching

Front 9

A part of Parental Controls that is used to limit access to games.

Back 9

game controls

Front 10

An account with minimal privileges intended to give minimal access to Windows 7. This account is disabled by default.

Back 10

Guest account

Front 11

The account with administrative privileges created during the installation of Windows 7.

Back 11

initial account

Front 12

A user account that is defined in the SAM database of a Windows 7 computer. Local user accounts are valid only for the local computer.

Back 12

local user account

Front 13

An MMC snap-in that is used to manage users and
groups.

Back 13

Local Users and Groups MMC snap-in

Front 14

A profile that cannot be changed by users. NTUSER.DAT is renamed to NTUSER.MAN.

Back 14

mandatory profile

Front 15

The file containing user-specific registry entries in a user profile.

Back 15

NTUSER.DAT

Front 16

A method for configuring time limits, controlling game playing, and allowing or blocking programs.

Back 16

Parental Controls

Front 17

A network where all computers store their own security information and share data.

Back 17

peer-to-peer network

Front 18

A profile that is merged with all other user profiles. The public profile does not contain an NTUSER.DAT file.

Back 18

public profile

Front 19

A user profile that is stored in a network location and is accessible from multiple computers. Roaming profiles move with users from computer to computer.

Back 19

roaming profile

Front 20

Adds the requirement to press Ctrl+Alt+Del before logging on.

Back 20

secure logon

Front 21

The database used by Windows 7 to store local
user and group information.

Back 21

Security Accounts Manager (SAM) database

Front 22

A number that is added to the access control list of a resource when a user or group is assigned access.

Back 22

Security Identifier (SID)

Front 23

A type of user account that does not have privileges to modify settings for other users. This type of account is a member of the Users local group.

Back 23

standard user account

Front 24

A part of Parental Controls that is used to control when users are allowed to log on to the computer.

Back 24

time limits

Front 25

User accounts are used for authentication to prove the identity of a person logging on to Windows 7.

Back 25

user account

Front 26

A simplified interface for user management in Control Panel.

Back 26

User Accounts applet

Front 27

The default logon method for Windows 7. This method presents icons representing each user.

Back 27

Windows Welcome

Front 28

A collection of settings, such as lockout duration, that control account lockouts.

Back 28

account lockout policy

Front 29

An XML file that describes the structure of an application, including required DLL files and privilege requirements.

Back 29

application manifest

Front 30

A new feature in Windows 7 that is used to define which programs are allowed to run. This is a replacement for the software restriction policies found in Windows XP and
Windows Vista.

Back 30

AppLocker

Front 31

An encryption algorithm that uses two keys to encrypt and decrypt data. Data encrypted with one key is decrypted by the other key.

Back 31

asymmetric encryption algorithm

Front 32

The settings that define which operating system events are audited.

Back 32

audit policy

Front 33

The security process that records the occurrence of specific operating system events in the Security log.

Back 33

auditing

Front 34

A feature in Windows 7 that can encrypt the operating system partition of a hard drive and protect system files from modification. Other partitions can also
be encrypted.

Back 34

BitLocker Drive Encryption

Front 35

A new feature in Windows 7 that allows you to encrypt removable storage.

Back 35

BitLocker To Go

Front 36

An encryption technology for individual files and folders that can be enabled by users.

Back 36

Encrypting File System (EFS)

Front 37

The key used to encrypt the VMK when BitLocker Drive
Encryption is enabled.

Back 37

Full Volume Encryption Key (FVEK)

Front 38

A one-way encryption algorithm that creates a unique identifier that can be used to determine whether data has been changed.

Back 38

hash encryption algorithm

Front 39

A set of security configuration options in Windows 7. These options are used to control user rights, auditing, password settings, and more.

Back 39

local security policy

Front 40

Malicious software designed to perform unauthorized acts on your computer. Malware includes viruses, worms, and spyware.

Back 40

malware

Front 41

Free antivirus software that is available if your copy of
Windows 7 is genuine.

Back 41

Microsoft Security Essentials

Front 42

A computer authorization system for networks that
prevents unhealthy computers from accessing the network.

Back 42

Network Access Protection (NAP)

Front 43

A collection of settings to control password characteristics such as length and
complexity.

Back 43

password policy

Front 44

A command-line tool that is used to apply, export, or analyze security templates.

Back 44

Secedit

Front 45

An MMC snap-in that is used to apply, export, or
analyze security templates.

Back 45

Security Confi guration and Analysis tool

Front 46

An .inf file that contains security settings that can be applied to a computer or analyzed against a computer’s existing configuration.

Back 46

security template

Front 47

An encryption algorithm that uses the same key to encrypt and decrypt data.

Back 47

symmetric encryption algorithm

Front 48

A motherboard module that is used to store encryption keys and certificates.

Back 48

Trusted Platform Module (TPM)

Front 49

A feature in Windows 7 that elevates user privileges only when required.

Back 49

User Account Control (UAC)

Front 50

The key used to encrypt hard drive data when BitLocker Drive Encryption is enabled.

Back 50

Volume Master Key (VMK)

Front 51

Anti-spyware software included with Windows 7.

Back 51

Windows Defender

Front 52

A service that collects and distributes patches to
Windows workstations by using the automatic updates process.

Back 52

Windows Server Update Services (WSUS)