Lesson 21: Securing Windows

Active Directory (AD)

A centralized directory service used in enterprise environments to manage user accounts, devices and security policies.

Category View

A viewing mode in Control Panel that organizes settings into broad categories.

Fingerprint

A biometric authentication method used with Windows Hello.

Group Policy Management Console (GPMC)

The interface used to create, edit, and apply Group Policy settings in Active Directory.

Administrator

A user account type with full control over system settings and configurations.

Control Panel

A centralized interface in Windows for managing and configuring system settings, hardware, and software.

Folder Redirection

A feature that redirects user folders to a network location, often used in enterprise environments.

Large icons view

A viewing mode in Control Panel that displays all tools as individual icons.

BitLocker

A full disk encryption tool that protects the entire drive, available in Windows Pro, Enterprise, and Education editions.

Encrypting File System (EFS)

A file-level encryption tool for protecting individual files and folders.

Full Control (NTFS and Share) permission

A permission level that allows users to read, write, modify, and delete files and folders, and change permissions.

Local Account

A user account that exists only on the local computer or domain.

BitLocker-To-Go

A version of BitLocker used to encrypt USB drives and other portable storage devices.

Facial Recognition

A biometric authentication method supported by Windows Hello.

Group Policy

A feature used to enforce security and configuration settings across users and devices in a domain.

Log-in scripts

Scripts executed upon user login to automate tasks such as mapping drives.

Microsoft Account

An online account that allows syncing settings across devices.

Power User

A legacy Windows account type with elevated permissions for managing devices and performing advanced tasks.

Share Permissions

Permissions that control remote access to shared folders over a network.

Windows Defender Antivirus

The built-in security solution in Windows for protecting against malware and viruses.

Modify Permission

An NTFS permission that allows users to read and write files and folders but not change permissions.

Read Permission

A permission that allows viewing file or folder contents without making changes.

Single Sign-On (SSO)

An authentication method that allows access to multiple services with one set of credentials.

Windows Defender Firewall

A built-in firewall that manages inbound and outbound traffic and enforces network security.

Passwordless Authentication

A login method that replaces passwords with alternatives like biometrics or security keys.

Read and Execute Permission

A permission allowing file/folder viewing and execution of programs.

Standard Account

A user account type with limited permissions for daily tasks

Windows Hello

A windows authentication system using biometrics such as fingerprints or facial recognition.

User Account Control (UAC)

A security feature that alerts users when a program attempts to make system changes requiring administrative privileges.

Personal identification number (PIN)

A device-specific numeric code used for authentication.

Run as Administrator

A feature that launches applications with elevated privileges.

Write Permission

A permission that allows modification of file contents but may not allow viewing the folder.