Lesson 21 – Securing Windows

Active Directory - AD

A centralized directory service used in enterprise environments to manage user accounts, devices, and security policies.

Administrator

A user account type with full control over system settings and configurations.

BitLocker

A full disk encryption tool that protects the entire drive, available in Windows Pro, Enterprise, and Education editions.

BitLocker-To-Go

A version of BitLocker used to encrypt USB drives and other portable storage devices.

Category view

A viewing mode in Control Panel that organizes settings into broad categories.

Control Panel

A centralized interface in Windows for managing and configuring system settings, hardware, and software

Encrypting File System - EFS

A file-level encryption tool for protecting individual files and folders.A file-level encryption tool for protecting individual files and folders.

Facial recognition

A biometric authentication method supported by Windows Hello.

Fingerprint

A biometric authentication method used with Windows Hello

Folder Redirection

A feature that redirects user folders to a network location, often used in enterprise environments

Full Control (NTFS and Share) permission

A permission level that allows users to read, write, modify, and delete files and folders, and change permissions.

Group Policy

A feature used to enforce security and configuration settings across users and devices in a domain.

Group Policy Management Console - GPMC

The interface used to create, edit, and apply Group Policy settings in Active Directory.

Large icons view

A viewing mode in Control Panel that displays all tools as individual icons.

Local Account

A user account that exists only on the local computer or domain.

Log-in scripts

Scripts executed upon user login to automate tasks such as mapping drives.

Microsoft Account

An online account that allows syncing settings across devices.

Modify permission

An NTFS permission that allows users to read and write files and folders but not change permissions.

Passwordless Authentication

A login method that replaces passwords with alternatives like biometrics or security keys.

Personal Identification Number - PIN

:A device-specific numeric code used for authentication.

Power User

A legacy Windows account type with elevated permissions for managing devices and performing advanced tasks.

Read permission

A permission that allows viewing file or folder contents without making changes.

Read & Execute Permission

A permission allowing file/folder viewing and execution of programs.

Run as Administrator

A feature that launches applications with elevated privileges

Share Permissions

Permissions that control remote access to shared folders over a network.

Single Sign-On - SSO

An authentication method that allows access to multiple services with one set of credentials.

Standard Account

A user account type with limited permissions for daily tasks.

User Account Control - UAC

A security feature that alerts users when a program attempts to make system changes requiring administrative privileges.

User Accounts

A tool for managing user profiles and login settings

Windows Defender Antivirus

The built-in security solution in Windows for protecting against malware and viruses.

Windows Defender Firewall

A built-in firewall that manages inbound and outbound traffic and enforces network security.

Windows Hello

A Windows authentication system using biometrics such as fingerprints or facial recognition.

Write permission

A permission that allows modification of file contents but may not allow viewing the folder.