The Windows-based directory service. Active Directory stores information about objects on a network and makes this information available to users and network administrators. Active Directory gives network users access to permitted resources anywhere on the network using a single logon process. It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration for all network objects.

The person responsible for administering use of a shared computer system, communications system, or both. A system administrator performs such duties as assigning user accounts and passwords, establishing security access levels, allocating storage space, and watching for unauthorized access.

A periodic update from software manufacturers to their antivirus software.

A feature that works with the Windows Update Web site to deliver updates (patches and fixes) for Windows as they become available according to settings that users can choose.

A tab in the User Settings dialog box used to block a given user from accessing listed programs.

Generally, a file used to store information temporarily. Windows Disk Protection utilizes a cache file to store changes made to system and profile files during user sessions. This cache file is emptied of contents at intervals, depending on how Windows Disk Protection is configured.

To erase or empty the cache file on the hard disk when a user logs off or the computer is restarted (only when Windows Disk Protection is turned on).

Settings that limit operating system functionality; including, privacy and security.

A broadly released fix for a specific problem addressing a critical, non-security related issue or bug.

Update, patch, or upgrade to software other than those available through Microsoft Update.

The process of rewriting parts of a file to contiguous sectors on a hard disk to increase the speed of access and retrieval. In Active Directory, defragmentation rearranges how the data is written in the directory database file to compact it.

To deactivate or turn off.

A collection of computers in a networked computer environment that share a common domain database and security policy. A domain is administered as a unit with common rules and procedures, and each domain has a unique name.

Feature on the Windows Restrictions tab of the User Settings dialog box that allows administrator to select which drives on the computer are accessible and visible to the users of the shared user profile.

To activate or turn on.

To output data and database objects to another database, spreadsheet, or file format so another database, application, or program can use the data or database objects. You can export data to a variety of supported databases, programs, and file formats.

A feature set in Windows Vista that allows parents and individuals to customize key aspects of their online and computing experience as they feel appropriate for their child or themselves (specifically, people they interact with and information they see).

Settings that limit customer use of, or access to, specific feature attributes and commands.

The process of capturing an installation of Windows for deployment to one or more destination computers.

To bring information from one system or program into another. The system or program receiving the data must somehow support the internal format or structure of the data.

A freestanding computer or terminal that provides information to the public, usually through a multimedia display.

To allow the shared user profile configuration set by the administrator to remain static from one user session to another.

A user account whose user profile settings return to a state defined by Windows SteadyState every time a user logs on to the account; no matter where the user profile settings are physically located.

A user profile that is not updated when the user logs off. It is downloaded to the user's desktop each time the user logs on, and it is created by an administrator and assigned to one or more users to create consistent or job-specific user profiles. Only members of the Administrators group can change profiles.

A Microsoft Web site that provides updates (patches and fixes) for multiple Microsoft products in one place, including Windows operating system software and Windows-based hardware, Microsoft Office system, Microsoft SQL Server, and Microsoft Exchange Server.

A message or announcement sent to the user or administrator of a system. The recipient may be a person or an automated notification manager.

The area on the taskbar adjacent to the system control area that contains icons that appear when certain events occur, such as when you receive e-mail.

A person who controls a machine or system, such as a computer or telephone switchboard.

A portion of a physical disk that functions as though it were a physically separate disk. After you create a partition, you must format it and assign it a drive letter before you can store data on it. On basic disks, partitions are known as basic volumes, which include primary partitions and logical drives. On dynamic disks, partitions are known as dynamic volumes, which include simple, striped, spanned, mirrored, and redundant array of independent disks (RAID)-5 volumes.

Settings that allow the administrator to control the collection, use, and distribution of personal data.

A partition on a shared computer whose state is made static by Windows Disk Protection.

A computer in a public environment that is accessed by several different users on a daily basis. Often this type of computer is utilized as a public access computer, Internet kiosk, lab computer, or instructional computer.

For an administrator, the process of managing Windows Disk Protection in Windows SteadyState from a remote computer through Active Directory Group Policy.

To block access to a program or operating system functionality.

A user account that has settings or restrictions applied by Windows SteadyState.

A setting that blocks access to program or operating system functionality by Windows SteadyState.

A pre-defined set of program restrictions that are automatically applied.

When Windows Disk Protection is turned on, to keep (not erase) the cache file on the hard disk when a user logs off or the computer is restarted.

A server-based user profile that is downloaded to the local computer when a user logs on and that is updated both locally and on the server when the user logs off. A roaming user profile is available from the server when logging on to a workstation or server computer. When logging on, the user can use the local user profile if it is more current than the copy on the server.

Feature in Windows SteadyState used to set schedules for software and operating system updates. Tool works in conjunction with Windows Disk Protection to ensure that updates are saved permanently.

Windows launch point to manage security settings for automatic updates, internet options, or Windows Firewall.

Settings used to specify privacy, security, and logon configurations for Windows.

Feature on the General tab of User Settings that allows the administrator to display the session countdown interface to alert users of how much time is left before the end of their sessions.

Feature on the General tab of User Settings that allow the administrator to set session limits and display attributes.

A computer in a public environment that is accessed by several different users on a daily basis. Often this type of computer is utilized as a public access computer, Internet kiosk, lab computer, or instructional computer.

A single user account that is logged on to by multiple users.

A file that contains configuration information for a specific user including settings and restrictions applied by Windows SteadyState. Each user's preferences, such as desktop settings, persistent network connections, and application settings, are saved to a user profile that Windows uses to configure the desktop each time a user logs on.

Settings that allow the administrator to restrict Start menu attributes.

The tool that prepares an operating system for imaging. Sysprep removes system-specific settings and other data that should not be copied to a destination computer. Sysprep also resets the Windows installation to start Windows Welcome or in audit mode.

Unpartitioned and unformatted space on a hard disk.

Allows the shared user profile configuration set by the administrator to be modified by users from one session to another.

A user account whose settings that are changed in a user session are retained every time the user logs on to the account.

A person working with software on a computer; a computer operator.

Picture associated with shared user profile in Windows SteadyState.

A service that helps to ensure user sessions are completely terminated when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases the user session is prevented from completely ending.

A file that contains configuration information for a specific user, such as desktop settings, persistent network connections, and application settings. Each user's preferences are saved to a user profile that is used to configure the computer each time a user logs on.

Windows SteadyState feature used for configuring shared user profiles.

A feature that helps protect the Windows partition that contains the Windows operating system and other programs from being permanently modified from user session to user session. After Windows Disk Protection is installed, the administrator can choose to retain all changes, retain changes for a specified duration, or to remove all changes to the Windows partition at each computer restart.

A program for licensed Windows software that provides access to updates, value-added downloads, free software trials, and special promotions.

A single set of sign-in credentials (e-mail address and password) that provide user access to Windows Live ID sites and services.

Restricts user access to programs, settings, Start menu items, and locks shared local user profiles against permanent changes.

A software application that is used by administrators of one or more public shared computers to help maintain computer reliability and stability from one user session to the next.

A Microsoft Web site from which Windows users can install or update device drivers. By using an ActiveX control, Windows Update compares the available drivers with those on the user's system and offers to install new or updated versions.

A grouping of computers organized to allow users to access and share resources, such as printers and shared folders, within the specified group. Workgroups in Windows do not offer the centralized user accounts and authentication offered by domains.