Server 2008 Ad Configuration - Module 1

Front 1

Active Directory Domain Services (AD DS)

Back 1

Windows Server 2008 service that provides a centralized authentication service for Microsoft networks. Provides the full-fledged directory service that is called Active Directory in Windows Server 2008 and previous versions of Windows Server.

Front 2

application partition

Back 2

A partition that allows information to be replicated to administratively chosen domain controllers. This offers control over the scope and placement of information that is to be replicated.

Front 3

attribute

Back 3

Characteristics associated with an object class in Active Directory that make the object class unique within the database. The list of ___ is defined only once in the schema, but the same ___ can be associated with more than one object class.

Front 4

Configuration NC

Back 4

The configuration partition contains information regarding the physical topology of the network, as well as other configuration data that must be replicated throughout the forest.

Front 5

container object

Back 5

An object, such as a domain or an Organizational Unit, that is used to organize other objects. Also known as a leaf object.

Front 6

cross-forest trust

Back 6

Trust type that allows resources to be shared between Active Directory forests

Front 7

delegation

Back 7

Administration of an Organizational Unit is tasked to a departmen- tal supervisor or manager, thus allowing that person to manage day-to-day resource access as well as more mundane tasks, such as resetting passwords.

Front 8

directory service

Back 8

Allows businesses to define, manage, access, and secure network resources, including files, printers, people, and applications.

Front 9

distinguished name (DN)

Back 9

The full name of an object that includes all hierarchical containers leading up to the root domain. The distinguished name begins with the object’s common name and appends each succeeding parent container object, reflecting the object’s location in the Active Directory structure.

Front 10

domain

Back 10

A grouping of objects in Active Directory that can be managed together. A domain can function as a security boundary for access to resources, such as computers, printers, servers, applications, and file systems

Front 11

domain controller (DC)

Back 11

A server that stores the Active Directory database and authenticates users with the network during logon

Front 12

Domain Name System (DNS)

Back 12

The name resolution mechanism computers use for all Internet communications and for private networks that use the Active Directory domain services included with Microsoft Windows Server 2008, Windows Server 2003, and Windows 2000 Server.

Front 13

Domain NC

Back 13

Active Directory domain partition that is replicated to each domain controller within a particular domain. Each domain’s Domain NC contains information about the objects that are stored within that domain: users, groups, computers, printers, Organizational Units, and more.

Front 14

domain tree

Back 14

In Active Directory, a logical grouping of network resources and devices that can contain one or more domains configured in a parent–child relationship.

Front 15

external trust

Back 15

A one-way, nontransitive trust that is established with a Windows NT domain or a Windows 2000 domain in a separate forest.

Front 16

fault tolerant

Back 16

The ability to respond gracefully to a software or hardware failure. In particular, a system is considered to be ____ when it has the ability to continue providing authentication services after the failure of a domain controller.

Front 17

forest

Back 17

The largest container object within Active Directory. The ____ container defines the fundamental security boundary within Active Directory, which means that a user can access resources across an entire Active Directory ____ using a single logon/ password combination.

Front 18

forest root domain

Back 18

The first domain created within an Active Directory forest

Front 19

functional levels

Back 19

Designed to offer support for Active Directory domain controllers running various supported operating systems by limiting functionality to specific software versions.

Front 20

globally unique identifier (GUID)

Back 20

A 128-bit hexadecimal number that is assigned to every object in the Active Directory forest upon its creation. This number does not change even when the object itself is renamed

Front 21

inbound replication

Back 21

Occurs when a domain controller receives updates to the Active Directory database from other domain controllers on the network

Front 22

IP address

Back 22

A unique number used to identify all devices on an IP network. They are four octets long and are commonly expressed in dotted-decimal notation, such as 192.168.10.1

Front 23

Knowledge Consistency Checker (KCC)

Back 23

An internal Active Directory process that automatically creates and maintains the replication topology. It operates based on the information provided by an administrator in the Active Directory Sites and Services snap-in.

Front 24

leaf object

Back 24

An object, such as a domain or an Organizational Unit, that is used to organize other objects. Also known as a container object.

Front 25

Lightweight Directory Access Protocol (LDAP)

Back 25

The protocol that has become an industry standard that enables data exchange between directory services and applications.

 

The ___ standard defines the naming of all objects in the Active Directory database and, therefore, provides a directory that can be integrated with other directory services.

Front 26

link-value replication

Back 26

When a change is made to the member list of a group object, only the portion of the member list that has been added, modified, or deleted will be replicated.

Front 27

locator service

Back 27

Active Directory DNS provides direction for network cliens that need to know which server performs what finction

Front 28

loose consistency

Back 28

Individual domain controllers in an Active Directory database may contain slightly different information, because it can take anywhere from a few seconds to seceral hours for changes to replicate throughout a given environment.

Front 29

naming context (NC)

Back 29

An Active Directory partition

Front 30

object

Back 30

An element in Active Directory that refers to a resource.

Front 31

organizational unit (OU)

Back 31

A container that represents a logical grouping of resources that have similar security or administrative guidelines

Front 32

outbound replication

Back 32

Occurs when a domain controller transmits replication information to other domain controllers on the network

Front 33

partition

Back 33

Portion of Active Directory database used to divide the database into manageable pieces

Front 34

publishing

Back 34

An option that allows users to access network resources by dearching the Active Directory database for the desired resource.

Front 35

Read-Only Domain Controller (RODC)

Back 35

A domain controller that contains a copy of the ntds.dit file that cannot be modified and that does not replicate its changes to other domain controllers within Active Directory. This feature was introduced in Windows Server 2008

Front 36

replication

Back 36

The process of keeping each domain controller in sync with changes made elsewhere on the network

Front 37

rolling upgrades

Back 37

Upgrade strategy based on fucntional levels that allows wnterprises to migrate their Active Directory domain controllers gradually, based on the need and desire for the new functionality

Front 38

schema

Back 38

Master database that contains definitions of all objects in the Active Directory

Front 39

Schema NC

Back 39

The partition that contains the rules and definitions used for creating and modifying object classes and attributes within Active Directory

Front 40

shortcut trust

Back 40

A manually created nontransitive trust that allows child domains in separate trees to communicate more efficiently by eliminating the tree-walking of a trust path

Front 41

site

Back 41

One or more IP subnets connected by fast links

Front 42

SRV record

Back 42

The locator records within DNS that allows clients to locate an Active Directory domain controller or global catalog

Front 43

trust relationship

Back 43

Enables administrators from a particular domain to grant access to their domain's resources to users in other domains