Module 3

dynamic lock

A security feature that locks Windows 10 when a paired Bluetooth device moves out of range.

secure sign-in

A sign-in method that adds the requirement to press Ctrl+Alt+Delete before signing in.

fast user switching

A sign-in method that allows multiple users to have applications running at the same time but allows only one user to use the console at a time.

assigned access

A sign-in option that you can configure for a single local user account that restricts the user to using only an assigned Windows Store app; often used to configure Windows 10 as a kiosk.

standard user account

A type of user account that does not have privileges to modify settings for other users. This type of account is a member of the Users local group.

local user account

A user account, valid only for the local computer, that is defined in the SAM database of a Windows 10 computer.

roaming profile

A user profile, which moves with a user from computer to computer, that is stored in a network location and is accessible from multiple computers.

security identifier (SID)

A user- or group-specific number that is added to the access control list of a resource when a user or group is assigned access.

public profile

A profile that is merged with all other user profiles. The public profile does not contain an Ntuser.dat file.

Guest

A built-in Windows 10 account, initially disabled by default, that provides minimal privileges intended to give very limited access to Windows 10.

user profile

A collection of desktop and environment configurations for a specific user or group of users. By default, each user has a separate profile stored in C:\Users.

kiosk

A computer in a public space that is dedicated for a single purpose.

folder redirection

A feature that redirects profile folders from the local computer to a network location.

security key

A hardware device that uniquely identifies a user, requiring a PIN or biometric information to unlock the security key.

User Accounts applet

A legacy interface for user management in Control Panel.

peer-to-peer network

A network where all computers store their own security information and share data.

domain-based network

A network where security information is stored centrally in Active Directory.

smart card

A physical card containing a certificate that can be used as an authentication method.

mandatory profile

A profile that cannot be changed by users. Ntuser.dat is renamed to Ntuser.man.

Local Users and Groups MMC snap-in

An MMC snap-in that is used to manage users and groups.

Microsoft account

An account, stored online by Microsoft, that you can use to authenticate to multiple Microsoft cloud services and Windows 10.

PIN authentication

An authentication method in which you enter a device-specific PIN rather than a user name and password.

picture password authentication

An authentication method in which you use gestures on a picture.

virtual smart card

An authentication method similar to a smart card, but the certificate is stored in a TPM on the motherboard rather than on a physical card.

Windows Hello for Business

An enhanced password less authentication system that uses certificates to uniquely identify each user.

biometric authentication

Authentication method that is based on physical characteristics of the user, such as a fingerprint or facial recognition.

pass-through authentication

Automatic authentication to a remote resource when the local computer passes the local credentials to the remote computer.

cached credentials

Credentials that are stored in Windows 10 after a user has signed in to a domain or Microsoft account and can be used to sign in when a domain controller cannot be contacted or when no network connectivity is detected.

built-in local groups

Groups that are automatically created for each Windows 10 computer and stored in the SAM database.

Windows Hello

Infrastructure in Windows 10 that supports password less authentication.

user account

Required account used for authentication to prove the identity of a person signing in to Windows 10.

initial account

The account with administrative privileges created during the installation of Windows 10.

Administrator

The built-in Windows 10 account that is created during installation and has full rights to the system. This account cannot be deleted or removed by the Administrators group.

Security Accounts Manager (SAM) database

The database used by Windows 10 to store local user and group information.

Ntuser.dat

The file containing user-specific registry entries in a user profile.

default profile

The profile that is copied when new user profiles are created.

administrator account

The type of user account that is made a member of the Administrators local group and has full rights to the system.