A Windows NT domain that holds user account data. Also known as a master user domain.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

The process of moving accounts, resources, and their associated security objects from one domain structure to another.

The process of reorganizing one domain structure into another that typically results in the accounts, groups, and trusts being altered.

The process of installing a newer version of an operating system on all domain controllers in a domain.

There are no glossary terms that begin with this letter.

One or more Active Directory domains that share the same class and attribute definitions (schema), site and replication information (configuration), and forest-wide search capabilities (global catalog). Domains in the same forest are linked with two-way, transitive trust relationships.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

In a Windows 2000 domain, the default domain mode setting. Mixed mode enables Windows NT-based backup domain controllers to coexist with Windows 2000-based domain controllers. Mixed mode does not support universal groups or the nesting of groups. You can change the domain mode setting to native mode when all Windows NT-based domain controllers are removed from a domain.

In Windows Server 2003 domains, mixed mode is referred to as Windows 2000 mixed, and it is one of three domain functional levels available.

In Windows 2000 domains, the domain mode in which all domain controllers in a domain are running Windows 2000 and a domain administrator has switched the domain operation mode from mixed mode to native mode. Native mode supports universal groups and nesting of groups. In native mode, domain controllers running Windows NT 4.0 or earlier are not supported.

In Windows Server 2003 domains, native mode is referred to as Windows 2000 native, and it is one of three domain functional levels available.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

A Windows NT 4.0 domain that is used for hosting file, print, and other application services.

A data structure that contains security information associated with a protected object. Security descriptors include information about who owns the object, who can access it and in what way, and what types of access are audited.

A data structure of variable length that identifies user, group, and computer accounts. Every account on a network is issued a unique SID when the account is first created. Internal processes in Windows refer to an account's SID rather than the account's user or group name.

An account holder that is automatically assigned a security identifier (SID) to control access to resources. A security principal can be a user, group, service, or computer.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.

There are no glossary terms that begin with this letter.