| Term | Definition |
| access control list (ACL) | a list of users, groups, & permissions associated with a resource |
| authentication | process of identifying a user and insuring they are who they claim to be |
| basic disk | the old system of hard drive configuration into primary and extended partitions |
| complex trust relationship | a full-trust relationship between two or more domains |
| disjointed namespace | domain name that is part of the active directory but does not follow the contiguous namespace requirement |
| distinguished name | naming system that unoquely identifies the location of the object in the Active Directory structure |
| dynamic disk | new system of disk management introduced with NTFS5.0. Disks are managed by the system as a group and allow for creation of 5 different volume types: simple, spanned, mirrored, RAID-5, and striped |
| forest | collection of domain trees that share a common Active Directory database |
| global security policy | a security policy that affects domain users |
| interactive logon | authentication process where user in verified and given access to Active Directory |
| local security policy | security policy that affects local users |
| microsoft reserver (MSR) partition | partition on a disk that reserves disk space for use by system components |
| multimaster replication | security database replication where all domain controllers share a copy of the Active Directory database |
| namespace | label that identifies a unique location in a structure such as the Internet |
| network share | a resource on a network that is shared among assigned users |
| NTFS permissions | permissions assigned to directories and files. They are effective locally and over the network. |
| organizational unit | a container that holds objects and is used to organize a network into manageable units |
| permission | the ability to access a network share |
| security access token | contains the user's Security Identifier Number (SID) and the SID of any groups the user belongs to |
| security policy | a blanket policy that secures resources on the internet |
| share-level security | provides password protection and minimal share permissions to network shares; applies only to shares accessed over the network |
| snap-in | a tool or utility that is added to the Microsoft Management Console (MMC) |
| stand-alone server | a server that is not part of a domain. Security is handled locally and all security info is stored in the local database |
| tree | a collection of domains that share a common root domain and Active Directory database |
| two-way trust relationship | a truct relationship in which both domains are designated as a trusted domain and as a tructing domain. Both domains in the trust can share resources with each other |
| workgroup | a group of computers that share resources such as files and hardware |