Computer Networks & Active Directory

| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .A. :-


-: Access Control (Active Directory) :-
Active Directory Administrators can use Access Control to manage user access to shared resources for security purposes. In Active Directory, access control is administered at the object level by setting different levels of access, or permissions, to objects, such as Full Control, Write, Read, or No Access. Access control in Active Directory defines how different users can use Active Directory objects. The elements that define access control permissions on Active Directory objects include security descriptors, object inheritance, and user authentication.


-: Access Control List (ACL) :-
Access Control List (ACL) is a list of security protections that apply to an entire object, a set of the object's properties, or an individual property of an object. There are two types of access control lists: discretionary and system.


-: Active Directory :-
The Windows-based directory service. Active Directory (AD) stores information about objects on a network and makes this information available to users and network administrators. Active Directory gives network users access to permitted resources anywhere on the network using a single logon process. It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration for all network objects.
For more information, refer [1]


-: Active Directory Delegation :-
Active Directory Delegation involves a higher-level administrator granting a controlled set of permissions to a relatively lower-level administrator to give the lower-level administrator the ability to perform a specific administrative task i.e. authorization. There are two types of administrative tasks in AD.
(1) Data Management, i.e. modifying the data that is stored in the AD, example, creating/managing user accounts, modification of Group Policy settings , modification of group memberships.
(2) Service Management, i.e. modifying the configuration-related information in the AD, example, adding a DC to a child domain, associating a new subnet to a site, extending the AD schema.
-> Every administrative task involves performing some low-level operation on data.
-> Low-level operations on data can be (individually) authorized.
-> By being able to authorize the corresponding low-level task, you can delegate a task.
For more information, refer [1]


-: ADSI (Active Directory Service Interfaces) :-
Active Directory Service Interfaces (ADSI) is a directory service model and a set of Component Object Model (COM) interfaces. ADSI enables Windows applications and Active Directory clients to access several network directory services, including Active Directory. ADSI is supplied as a software development kit (SDK).
For more information, refer [1]


-: Attribute :-
For files, information that indicates whether a file is read-only, hidden, ready for archiving (backing up), compressed, or encrypted, and whether the file contents should be indexed for fast file searching.
In Active Directory, a property of an object. For each object class, the schema defines which attributes an instance of the class must have and which additional attributes it might have.


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .C. :-


-: Client-Server :-
Client-server computing or networking is a distributed application architecture that partitions tasks or work loads between service providers (servers) and service requesters, called clients. Often clients and servers operate over a computer network on separate hardware. A server machine is a high-performance host that is running one or more server programs which share its resources with clients. A client does not share any of its resources, but requests a server's content or service function. Clients therefore initiate communication sessions with servers which await (listen to) incoming requests.
For more information, refer [1]


-: Computer Network :-
A computer network is a group of interconnected computers.
For more information, refer [1]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .D. :-


-: Directory Data Store :-
This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts. Apart from these the directory also contains information about organizational units, and security policies. The directory data is stored in the NTDS.dit file on the domain controller (recommended to be stored in an NTFS partition). Directory data replicated between domain controllers include: Domain data, Configuration data, Schema data, and Application data.


-: Distribution Group :-
A group that is used solely for e-mail distribution and that is not security-enabled. Distribution groups cannot be listed in discretionary access control lists (DACLs) used to define permissions on resources and objects. Distribution groups can be used only with e-mail applications (such as Microsoft Exchange) to send e-mail to collections of users. If you do not need a group for security purposes, create a distribution group instead of a security group.


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .F. :-


-: FTP :-
File Transfer Protocol (FTP) is a standard network protocol used to exchange and manipulate files over an Internet Protocol computer network, such as the Internet. FTP is built on a client-server architecture and utilizes separate control and data connections between the client and server applications. FTP is also often used as an application component to automatically transfer files for program internal functions. FTP can be used with user-based password authentication or with anonymous user access.
For more information, refer [1]


-: FTP Commands :-
Refer http://ss64.com/osx/ftp_options.html for details


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .G. :-


-: Global Catalog :-
Global Catalog (GC) is a directory database that applications and clients can query to locate any object in a forest. The GC is hosted on one or more domain controllers in the forest. It contains a partial replica of every domain directory partition in the forest. It stores a full copy of all objects in the directory for its host domain and a partial copy of all objects for all other domains in the forest.
The replicas are as follows: the attributes most frequently used in search operations and the attributes required to locate a full replica of the object. This allows users and administrators to find directory information regardless of which domain in the directory actually contains the data. When you search for people or printer from the Start menu or choose the Entire Directory option within a query, you are searching a GC. Once you enter your search request, it is routed to the default GC port 3268 and sent to a GC for resolution.
A GC is created automatically on the initial domain controller in the forest.
In Microsoft Provisioning System, the Exchange server maintains a list of global catalogs, and it maintains a load balance across global catalogs.
A GC performs the following directory roles:
- Finds objects
- Supplies user principal name authentication
- Supplies universal group membership information in a multiple domain environment
- Validates object references within a forest


-: Group Scope :-
Groups, whether a security group or a distribution group, are characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. There are three group scopes: universal, global, and domain local.
The following table summarizes the behaviors of the different group scopes:

Universal scopeGlobal scopeDomain local scope
When the domain functional level is set to Windows 2000 native or Windows Server 2003, members of universal groups can include accounts, global groups, and universal groups from any domain.When the domain functional level is set to Windows 2000 native or Windows Server 2003, members of global groups can include accounts and global groups from the same domain.When the domain functional level is set to Windows 2000 native or Windows Server 2003, members of domain local scope can include accounts, global groups, and universal groups from any domain, as well as domain local groups from the same domain.
When the domain functional level is set to Windows 2000 mixed, security groups with universal scope cannot be created.When the domain functional level is set to Windows 2000 mixed, members of global groups can include accounts from the same domain.When the domain functional level is set to Windows 2000 native or Windows Server 2003, members of domain local groups can include accounts and global groups from any domain.
When the domain functional level is set to Windows 2000 native or Windows Server 2003, groups can be added to other groups and assigned permissions in any domain. Groups can be added to other groups and assigned permissions in any domain.Groups can be added to other domain local groups and assigned permissions only in the same domain.
Groups can be converted to domain local scope. Groups can be converted to global scope, as long as no other universal groups exists as members.Groups can be converted to universal scope, as long as the group is not a member of any other group with global scope.Groups can be converted to universal scope, as long as the group does not have as its member another group with domain local scope.

| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .I. :-


-: IIS (Internet Information Services) :-
IIS (Internet Information Services) is a secure, reliable, and scalable Web server that provides an easy to manage platform for developing and hosting Web applications and services.
For more information, refer [1] [2]. Click here to view The Official Microsoft IIS Site


-: InetOrgPerson :-
The inetOrgPerson class has been added to the base schema (as of Active Directory in Windows Server 2003) as a security principal and can be used in the same manner as the user class. The userPassword attribute can also be used to set the account password.
For more information, refer [1]


-: Internetwork :-
An Internetwork is a communication subsystem in which several networks are linked together to provide common data communication facilities that conceal the technologies and protocols of the individual component networks and the methods used for their interconnection. It involves connecting two or more computer networks via gateways using a common routing technology. The result is called an internetwork (often shortened to Internet).
For more information, refer [1]


-: IP (Internet Protocol) :-
The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched internetwork using the Internet Protocol Suite, also referred to as TCP/IP. It has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose the Internet Protocol defines addressing methods and structures for datagram encapsulation.
For more information, refer [1]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .L. :-


-: LDAP (Lightweight Directory Access Protocol) :-
LDAP is an Internet Protocol that email and other programs use to look up information from a server. It is an application protocol for querying and modifying directory services running over TCP/IP. A client starts and LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP port 389. The client then sends an operation request to the server, and the server sends responses in return. LDAP is not restricted to contact information, or even information about people. LDAP is used to look up encryption certificates, pointers to printers and other services on a network, and provide "single signon" where one password for a user is shared between many services. LDAP is appropriate for any kind of directory-like information, where fast lookups and less-frequent updates are the norm.
Limitations of LDAP:
- Protocol cannot and will not make relational databases redundant
- It is not reasonable to expect LDAP to serve as a file system
- It does not have the locking semantics needed to read- and write-protect files
- LDAP is not a stand-in for DNS
- It does not offer two-phase commits
For more information, refer [1], [2], [3]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .N. :-


-: NewSID :-
NewSID is a program developed by Microsoft that changes a computer's security identifier. It is free and is a Win32 program, meaning that it can easily be run on systems that have been previously cloned. This is required in organizations that usually perform mass rollout of Windows. This technique involves copying the disks of a fully installed and configured Windows computer onto the disk drives of other computers. This results in duplicated Computer Security Identifiers and such computers can cause problems on a network. Thus, NewSID is used.
For more information, refer [1]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .O. :-


-: Object Class :-
A distinct, named set of attributes that represents a specific type of entity stored in the directory, such as users, printers, or applications. The attributes include data describing the thing that is identified by the directory object. Attributes of a user might include the user's first name, last name, and e-mail address.


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .R. :-


-: RARP (Reverse Address Resolution Protocol) :-
RARP is a protocol by which a physical machine in a local area network can request to learn its IP address from a gateway server's Address Resolution Protocol (ARP) table or cache.
For more information, refer [1] [2]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .S. :-


-: Schema (Active Directory) :-
The Active Directory schema contains the definitions for all objects in the directory. Every new directory object you create is validated against the appropriate object definition in the schema before being written to the directory. The schema is made up of object classes and attributes. The base (or default) schema contains a rich set of object classes and attributes to meet the needs of most organizations, and is modeled after the International Standards Organization (ISO) X.500 standard for directory services. Because it is extensible, you can modify and add classes and attributes to the base schema. However, you should carefully consider each change you make, because extending the schema affects the entire network.


-: Schema Cache (Active Directory) :-
To improve performance on schema operations (such as new object validation), each domain controller holds a copy of the schema in memory (in addition to the copy it holds on disk). This cached version is automatically updated (after a small time interval) each time you update the schema. Or, you can reload the updated schema to cache manually for immediate effect.


-: Security Group :-
A group that can be listed in discretionary access control lists (DACLs) used to define permissions on resources and objects. A security group can also be used as an e-mail entity. Sending an e-mail message to the group sends the message to all the members of the group.


-: Security Descriptors :-
Security Descriptor is a data structure that contains security information associated with a protected object. Security descriptors include information about who owns the object, who can access it and in what way, and what types of access are audited. Access control permissions are assigned to shared objects and Active Directory objects to control how different users can use each object. Both, shared objects and Active Directory objects, store access control permissions in Security Descriptors.
A security descriptor contains two access control lists (ACLs) used to assign and track security information for each object: the discretionary access control list (DACL) and the system access control list (SACL).


-: Security Principal :-
A Security Principal is an entity that can be authenticated by a computer system or network. it can be assigned rights and privileges over resources in the network. The two common types of security principals are Users and Computers, which correspond to physical or virtual systems connected to the network. Some systems allow Services as security principals (associated with a User account). A Security Principal is associated with a Security Identifier.
For more information, refer [1] [2]


-: SFTP :-
In computing, the SSH File Transfer Protocol (sometimes called Secure File Transfer Protocol or SFTP) is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with version two of the SSH protocol (TCP port 22) to provide secure file transfer, but is intended to be usable with other protocols as well.
For more information, refer [1]


-: Shared Resource (Windows) :-
Any device, data, or program that is used by more than one program or one other device. For Windows, shared resource refers to any resource that is made available to network users, such as folders, files, printers, and named pipes. Shared resource can also refer to a resource on a server that is available to network users.


-: SID (Security Identifier) :-
A security identifier (SID) is a unique value of variable length that is used to identify a security principal or security group in Windows operating systems. There are well-known SIDs that identify generic users and generic groups. Their values remain constant across all operating systems.
For more information, refer [1]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .W. :-


-: W3C (World Wide Web Consortium) :-
The World Wide Web Consortium (W3C) (consortium = association, esp. of several business companies) develops interoperable technologies (specifications, guidelines, software, and tools) to lead the Web to its full potential. W3C is a forum for information, commerce, communication, and collective understanding.
For more information, refer [1]


-: Web Services :-
A Web Service is defined by the W3C as a software designed to support interoperable machine-to-machine interaction over a network. Web services are mostly Internet Application Programming Interfaces (API) that can be accessed over a network, such as the Internet, and executed on a remote system hosting the requested services. In general usage, Web services refers to clients and servers that communicate over the HTTP protocol used on the Web.
Such services fall into two categories:
(1) Big Web Services - use XML messages that follow SOAP standard and are mostly used in traditional enterprise
(2) RESTful Web Services (REpresentational State Transfer) - use PUT, GET, DELETE, HTTP methods, like POST, and these are better integrated with HTTP and web browsers.
Other approaches that provide similar functionality are Object Management Group's (OMG) Common Object Request Broker Architecture (CORBA), Microsoft's Distributed Component Object Model (DCOM) or Sun Micrososystem's Java/Remote Method Invocation (RMI).
For more information, refer [1]. Click here to download a PPT on Web Services Setup and Deployment


-: Windows PE :-
Windows Preinstallation Environment (Windows PE) 2.0 is a minimal Win32 operating system with limited services, built on the Windows Vista kernel. It is used to prepare a computer for Windows installation, to copy disk images from a network file server, and to initiate Windows Setup.
Windows PE is not designed to be the primary operating system on a computer, but is instead used as a standalone preinstallation environment and as an integral component of other setup and recovery technologies, such as Setup for Windows Vista, Windows Deployment Services (Windows DS), the Systems Management Server (SMS) Operating System (OS) Deployment Feature Pack, and the Windows Recovery Environment (Windows RE).
For more information, refer [1]


| A | B | C | D | E | F | G | H | I | J | K | L | M |
| N | O | P | Q | R | S | T | U | V | W | X | Y | Z |


-: .X. :-


-: XML (Extensible Markup Language) :-
XML is a data format for structured document interchange on the Web. It is called Extensible Markup Language because it is not a fixed format like HTML. It was designed to carry data, not to display it like HTML. XML does not have a predefined tag set, hence it does not have any predefined tags. It provides a facility to define tags and the structural relationships between them. It is designed to enable the use of Standard Generalized Markup Language (SGML).
The need for XML arises due to the incapabilities of HTML and SGML. In HTML, the semantics is predefined and it does not provide arbitrary structure. SGML provides arbitrary structure, but it is too complex to implement just for a web browser. XML is a W3C recommendation and is designed to be self-descriptive. It is not a replacement for HTML, but it complements HTML. XML has a strong support for the languages of the world via Unicode.
For more information, refer [1] [2]