Chapter 5 Unit 5 Windows 10
Term: standard user account
A type of user account that does not have privileges to modify settings for other users. This type of account is a member of the Users local group.
local user account
A user account that is defined in the SAM database of a Windows 10 computer. Local user accounts are valid only for the local computer.
user profile
A collection of desktop and environment configurations for a specific user or group of users. By default, each user has a separate profile stored in C:\Users.
Term: folder redirection
A feature that redirects profile folders from the local computer to a network location.
User Accounts applet
A legacy interface for user management in Control Panel.
peer-to-peer network
A network where all computers store their own security information and share data.
domain-based network
A network where security information is stored centrally in Active Directory.
domain-based networks
A network where security information is stored centrally in Active Directory.
Term: Fast user switching
Allows multiple users to have applications running at the same time. However, only one user can be using the console at a time.
Microsoft account
An account that is stored online by Microsoft. You can use it to authenticate to multiple Microsoft cloud services and Windows 10.
Term: PIN authentication
An authentication method where you enter a device-specific PIN rather than a user name and password.
picture password authentication
An authentication method where you trace gestures on a picture.
Term: Biometric authentication
Authentication that is based on physical characteristics of the user, such as a fingerprint or facial recognition.
cached credentials
Credentials that are stored in Windows 10 after a user has signed in to a domain or Microsoft account. Cached credentials can be used to sign in when a domain controller cannot be contacted or when there is no network connectivity.
Guest account
Definition: A built-in Windows 10 account with minimal privileges intended to give very limited access to Windows 10. This account is disabled by default.
Term: trusted platform module (TPM)
Definition: A chip on the motherboard of a computer that is designed to securely store encryption keys and certificates.
Term: Microsoft Passport
Definition: A multifactor authentication system in Windows 10 that enhances security by avoiding the use of a user name and password. Biometric authentication on the client allows access to the remote system.
Term: smart card
Definition: A physical card containing a certificate that can be used as an authentication method.
mandatory profile
Definition: A profile that cannot be changed by users. Ntuser.dat is renamed to Ntuser.man.
Term: public profile
Definition: A profile that is merged with all other user profiles. The public profile does not contain an Ntuser.dat file.
Term: Assigned access
Definition: A sign-in option that you can configure for a single local user account that restricts the user to using only an assigned Windows Store app; often used to configure Windows 10 as a kiosk.
roaming profile
Definition: A user profile that is stored in a network location and is accessible from multiple computers. Roaming profiles move with users from computer to computer.
security identifier (SID)
Definition: A user- or group-specific number that is added to the access control list of a resource when a user or group is assigned access.
Term: Secure sign-in
Definition: Adds the requirement to press Ctrl+Alt+Delete before signing in.
Local Users and Groups MMC snap-in
Definition: An MMC snap-in that is used to manage users and groups.
Term: virtual smart card
Definition: An authentication method similar to a smart card, but the certificate is stored in a TPM on the motherboard rather than on a physical card.
pass-through authentication
Definition: Automatic authentication to a remote resource when the local computer passes the local credentials to the remote computer.
Term: Windows Hello
Definition: Biometric authentication functionality in Windows 10. At release, Windows Hello supports fingerprints, facial recognition, and iris scanning.
Term: Administrator account
Definition: The built-in Windows 10 account that is created during installation and has full rights to the system. This account cannot be deleted or locked out.
built-in local groups
Groups that are automatically created for each Windows 10 computer and stored in the SAM database.
user account
Required account used for authentication to prove the identity of a person signing into Windows 10.
Term: initial account
The account with administrative privileges created during the installation of Windows 10.
Term: Security Accounts Manager (SAM) database
The database used by Windows 10 to store local user and group information.
Term: Ntuser.dat
The file containing user-specific registry entries in a user profile.
Term: default profile
The profile that is copied when new user profiles are created.
