Server 2008 Ad Configuration - Module 4

Front 1

cached credentials

Back 1

A cached copy of a user's logon credentials that have been stored on the user's local workstation

Front 2

clock skew

Back 2

The time difference between
any client or member server and the
domain controllers in a domain.

Front 3

Domain Naming Master

Back 3

A role that has the authority to manage the crea- tion and deletion of domains, domain trees, and application data partitions in the forest. Upon creation of any of these, the _______ ensures that the name assigned is unique to the forest

Front 4

_gc

Back 4

Global catalog service that listens on port 3268 to respond to requests to search for an object in Active Directory.

Front 5

indexed

Back 5

An attribute has been stored in the partial attribute set and replicated to all global catalog servers in the forest.

Front 6

Infrastructure Master

Back 6

A domain-specific role that is responsible for reference updates from its domain objects to other domains. This assists in tracking which domains own which objects.

Front 7

partial attribute set (PAS)

Back 7

A partial copy of all objects from other domains within the same forest. This partial copy of forest-wide data includes a subset of each object’s attributes

Front 8

Primary Domain Controller (PDC) Emulator

Back 8

A role that provides backward compatibility with Microsoft Windows NT 4.0 domains and other down-level clients.

Front 9

relative identifier (RID)

Back 9

A variable-length number that is assigned to objects at creation and becomes part of the object’s security identifier (SID)

Front 10

Relative Identifier (RID) Master

Back 10

Role that is responsible for assigning relative identifiers to domain controllers in the domain. Relative identifiers are variable-length numbers assigned by a domain controller when a new object is created.

Front 11

Schema Master

Back 11

An Active Directory role that has forest-wide authority to manage changes to the Active Directory schema

Front 12

security identifier (SID)

Back 12

A variable-length number used to uniquely identify an object throughout the Active Directory domain. Part of the ______ identifies the domain to which the object belongs, and the other part is the RID.

Front 13

seize

Back 13

A forced, ungraceful transfer of a role. This procedure is used only in the event of a catastrophic failure of a domain controller that holds a FSMO role.

Front 14

transfer

Back 14

Move a role to a new domain controller.

Front 15

universal group

Back 15

Memberships stored in the global catalog. A _______ can contain users, groups, and computers from any domain in the forest. In addition, ______ , through their membership in domain local groups, can receive permissions for any resource anywhere in the forest.

Front 16

universal group membership caching

Back 16

This feature stores universal group memberships on a local domain controller that can be used for logon to the domain, eliminating the need for frequent access to a global catalog server.