Account Management - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 195

Key Terms
contact An Active Directory object that usually represents a person for informational
purposes only, much like an address book entry.
distribution group A group type used when you want to group users together, mainly for
sending e-mails to several people at once with an Active Directory-integrated e-mail
application, such as Microsoft Exchange.
distribution list An Active Directory object consisting of a list of users in a distribution
group, used for sending an e-mail to multiple people simultaneously.
domain local group A group scope that's the main security principal recommended for
assigning rights and permissions to domain resources.
global group A group scope used mainly to group users from the same domain who have
similar access and rights requirements. A global group's members can be user accounts and
other global groups from the same domain.
group scope A property of a group that determines the reach of a group's application in a
domain or a forest—which security principals in a forest can be group members and to which
forest resources a group can be assigned rights or permissions.
local group A group created in the local SAM database on a member server or workstation
or a stand-alone computer.
local profile A user profile stored on the same system where the user logs on.
mandatory profile A user profile that can be changed during a user's logon session, but the
next time the user logs on, the changes aren't saved, and the profile reverts to its original state.
piping Sending the output of one command as input to another command.
roaming profile A user profile that follows the user no matter which computer he or she logs
on to. It's stored on a network share so that when a user logs on to any computer in the
network, the profile is copied from the network share to the profile folder on the local
computer.
security groups A group type that's the main Active Directory object administrators use to
manage network resource access and grant rights to users.
super mandatory profile A user profile type that prevents a user from logging on to the
domain when the mandatory profile is unavailable.
universal group A group scope that can contain users from any domain in the forest and be
assigned permission to resources in any domain in the forest.
user profile

5

A collection of a user's personal files and settings that define his or her working

environment.
user template

A user account that's copied to create users with common attributes.

Review Questions
1. Which of the following is a user account category? (Choose all that apply.)
a. Local
b. Global
c. Domain
d. Universal
2. Which of the following is a built-in user account? (Choose all that apply.)
a.

Administrator

b. Operator

c. Anonymous

d. Guest