Windows Server 2008 Active Directory Configuration - Chapter 01

Front 1

AD DS

Back 1

Active Directory Domain Services

Hint 1

Windows Server 2008 service that provides a centralized authentication service for Microsoft networks. Provides the full-fledged directory service that is called Active Directory in Windows Server 2008 and previous versions of Windows Server.

Front 2

DN

Back 2

Distinguished Name

Hint 2

The full name of the object that includes all hierarchical containers leading up to the root domain. The xxxxxxxxxxx begins with the object's common name and appends each succeeding parent contain object, reflecting the object's location in the Active Directory structure

Front 3

DC

Back 3

Domain Controller

Hint 3

A server that stores the Active Directory database and authenticates users with the network during logon.

Front 4

KCC

Back 4

Knowledge Consistency Checker

Hint 4

An internal Active Directory process tha automatically creates and maintains the replication topology. The xxxxxxxxxxx operates based on the information provided by an administrator in the Active Directory Sites and Services snap-in, which is located in the Administrative Tools folder on the domain controller, or an administrative workstation that has the Administrative Tools installed.

Front 5

NC

Back 5

Naming Context

Hint 5

An active Directory partition.

Front 6

DNS

Back 6

Domain Name System

Hint 6

The name resolution mechanism computers use for all Internet communications and for private networks that use the Active Directory domain services included with Microsoft Windows Server 2008, Windows Server 2003 and Windows 2000 Server.

Front 7

GUID

Back 7

Globally Unique Identifier

Hint 7

A 128-bit hexadecimal number that is assigned to every object in the Active Directory forest upon its creation. This number does not change even when the object itself is renamed.

Front 8

LDAP

Back 8

Lightweight Directory Access Protocol

Hint 8

The protocol that has become an industry standard that enables data exchange between directory services and applications. The xxxxxxxxx standard defines the naming of all objects in the Active Directory database and therefore, provides a directory that can be integrated with other directory services such as Novell eDeirectory, and Active Directory --aware applications, such as Microsoft Exchange.

Front 9

OU

Back 9

Organizational Unit

Hint 9

A container that represents a logical grouping of resources that have similar security or administrative guidelines.

Front 10

RODC

Back 10

Read-Only Domain Controller

Hint 10

A domain controller that contains a copy of the ntds.dit file that cannot be modified and that does not replicate its changes to other domain controllers within Active Directory. This feature was introduced in Windows Server 2008.

Front 11

Application Partition

Back 11

A partition that allows information to be replicated to administratively chosen domain controllers. An example of information that is commonly stored in an application partition is DNS data. xxxxxxxxx offer control over the scope and placement of information that is to be replicated

Front 12

Attribute

Back 12

Characteristics associated with an object class in Active Directory that make the object class unique within the database. The list of xxxxxxxs is defined only once in the schema, but the same xxxxxxxx can be associated with more than one object class.

Front 13

Configuration NC

Back 13

The configuration partition contains information regarding the physical topology of the network, as well as other configuration data that must be replicated throughout the forest.

Front 14

container object

Back 14

An object, such as a domain or an Organizational Unit, that is used to organize other objects. Also known as a leaf object.

Front 15

cross-forest trust

Back 15

Trust type that allows resources to be shared between Active Directory forests.

Front 16

delegation

Back 16

Administration of an Organizational Unit is tasked to a department supervisor or manager, thus allowing that person to manage day-to-day resource access as well as more mundane tasks, such as resetting passwords.

Front 17

directory service

Back 17

Allow businesses to define, manage, access, and secure network resources, including files, printers, people, and applications.

Front 18

domain

Back 18

A grouping of objects in Active Directory that can be namaged together. A domain can function as a security boundary for access to resources, such as computers, printers, servers, applications, and file systems.

Front 19

Domain NC

Back 19

Active Directory domain partition that is replicated to each domain controller within a particular domain. Each domain's xxxxxxx contains information about the objects that are stored within that domain; users, groups, computers, printers, Organization Units, and more.

Front 20

domain tree

Back 20

In Active Directory, a logical grouping of network resources and devices that can contain one or more domains configured in a parent-child relationship. Each Active Directory forest can contain one or more xxxxxxxs, each of which can, in turn, contain one or more domains.

Front 21

external trust

Back 21

A one-way, nontransitive trust that is established with a Windows NT domain or a Windows 2000 domain in a separate forest

Front 22

fault tolerant

Back 22

The ability to respond gracefully to a software or hardware failure. In particular, a system is considered to be xxxxxxxx when it has the ability to continue providing authentication services after the failure of a domain controller.

Front 23

forest

Back 23

The largest container object within Active Directory. The xxxxxxxx container defines the fundamental security boundary within Active Directory, which means that a user can access resources across an entire Active Directory xxxxxxxx using a single logon/password combination.

Front 24

forest root domain

Back 24

The first domain created within an Active Directory forest.

Front 25

functional levels

Back 25

Designed to offer support for Active Directory domain controllers running various supported operating systems by limiting functionality to specific software versions. As legacy domain controllers are decommissioned, administrators can modify the xxxxxxxxx to expose new functionality within Active Directory. Some features in Active Directory cannot be activated, for example, until all domain controllers in a forest are upgraded to a specific level.

Front 26

inbound replication

Back 26

Occurs sehan a domain controller receives updates to the Active Directory database from other domain controllers on the network

Front 27

IP address

Back 27

A unique number used to identify all devices on an IP network. xxxxxxxxxxs are four octets long an commonly expressed in dotted-decimal notation, such as 192.168.10.1.

Front 28

leaf object

Back 28

An object, such as a domain or an Organizational Unit, that is used to organize other objects. Also known as a container object.

Front 29

link-value replication

Back 29

An improvement to replication that is available after the forest functional level has been raised to Windows Server 2003, or higher, enabling a single membership change to a group to trigger the replication of only the change to each member in the list, rather than the entire membership list.

Front 30

locator service

Back 30

Active Directory DNS provides direction for network clients that need to know which server performs what function.

Front 31

loose consistency

Back 31

Individual domain controllers in an Active Directory database may contain slightly different information, because it can take anywhere from a few seconds to several hours for changes to replicate throughout a given environment.

Front 32

object

Back 32

An element in Active Directory that refers to a resource. Xxxxxxxs can be container xxxxxxs or leaf xxxxxs. Containers are used to organize resources for security or organizational purposes; leaf xxxxxxs refer to the end-node resources, such as users,computers, and printers.

Front 33

outbound replication

Back 33

Occurs when a domain controller transmits replication information to other domain controllers on the network.

Front 34

partition

Back 34

Portion of Active Directory database used to divide the database into manageable pieces.

Front 35

Publish

Back 35

1)An option that allows users to access network resources by searching the Active Directory database for the desired resource
2) An option used to deploy applications. It allows users to install the applications that they consider useful to them.

Front 36

replication

Back 36

The process of keeping each domain controller in sync with changes made elsewhere on the network.

Front 37

rolling upgrades

Back 37

Upgrade strategy based on functional levels that allows enterprises to migrate their Active Directory domain controllers gradually, based on the need and desire for the new functionality.

Front 38

schema

Back 38

Master database that contains definitions of all objects in the Active Directory.

Front 39

Schema NC

Back 39

The partition that contains the rules and definitions used for creating and modifying, object classes and attributes within Active Directory.

Front 40

shortcut trust

Back 40

A manually created nontransitive trust that allows child domains in separate trees to communicate more efficiently by eliminating the tree-walking of a trust path.

Front 41

site

Back 41

One or more IP subnets connected by fast links.

Front 42

SRV record

Back 42

The locator records within DNS that allows clients to locate an Active Directory domain controller or global catalog.

Front 43

trust relationship

Back 43

Enables administrators from a particular domain to grant access to their domain's resources to users in other domains.