Glossary

A

access control The process of appropriately authorizing, controlling, and auditing access to a particular object or system resource for a user, group, process, or system that can be identified by a security identifier (SID).

access control entry (ACE) An entry in an access control list (ACL) that associates a security identifier (SID) with a set of permissions to grant or deny access or specify auditing permissions to a particular object or system resource for a user, group, process, or system.

access control list (ACL) A property of every directory object that contains a list of access control entries (ACEs) to grant or deny permission to specific users and groups to access an object or system resource. Only users with Change Permission rights or the owner of an object are allowed to change the entries in an ACL. See also discretionary access control list (DACL) and system access control list (SACL).

account An administrative entity associated with a security identifier (SID) that gives identifies a user, group, computer, or process and can be referenced in access to a system access control list (SACL).

ACE See access control entry (ACE).

ACL See access control list (ACL).

action table A user-defined table of actions used by the Collaboration Data Objects (CDO) workflow engine to evaluate and execute transitions for items in a workflow process. An action table is a map of possible document state transitions.

Active Directory Connector (ADC) A synchronization agent in Microsoft Windows 2000 Server and Microsoft Exchange 2000 Server that keeps information between Active Directory directory service and the directory service of earlier versions of Microsoft Exchange Server consistent. The ADC can synchronize new data and updates in both directory services automatically.

Active Directory directory service The directory service of domain controllers running Microsoft Windows 2000 Server. Active Directory stores information about objects and resources in a hierarchical tree structure and provides a single point of administration for all network resources. Through a single logon process, users can gain access to permitted resources anywhere on the network.

Active Directory forest A distributed database that is made up of many partial databases that can be spread across many domain controllers. Within a single forest, schema, class, and attribute definitions as well as configuration, replication topology, and related metadata are replicated to every domain controller. The Windows 2000 Server domains that belong to the same forest define further directory partitions, which are replicated only to domain controllers in the local domain. See also directory partition.

Active Directory Migration Tool (ADMT) A tool to facilitate migration to Active Directory. The ADMT is a task-based wizard used to migrate users and set file permissions. It provides reporting features to assess the impact of the migration, both before and after the move operations. See also Active Directory directory service.

Active Directory Schema A partition in an Active Directory forest that contains definitions for the directory schema, its classes, attributes, and syntaxes. The schema is always replicated to every domain controller in the forest. It defines the individual object types that can be stored in the forest. The schema also enforces the rules that govern both the structure and the content of the directory. See also Active Directory forest, directory partition.

Active Directory Service Interface (ADSI) A set of application programming interfaces (APIs) that enables client applications to communicate with any directory service for which an ADSI provider is available, such as Active Directory. ADSI is supported on Microsoft Windows 2000, Windows NT, Windows 98, and Windows 95.

Active Directory Users and Computers A Microsoft Management Console (MMC) snap-in that enables you to manage Microsoft Windows 2000 user and computer accounts, security and distribution groups, and other domain resources.

Active Messaging The predecessor of Collaboration Data Objects (CDO) that came with Microsoft Exchange Server 5.0 to provide a library of Component Object Model (COM) objects to interact with the underlying messaging interfaces based on the Messaging Application Programming Interface (MAPI). See also Collaboration Data Objects (CDO) and Messaging Application Programming Interface (MAPI).

Active Server Page (ASP) A script-based application that is executed on an Internet Information Services (IIS) or other ASP-capable Web system. An ASP enables you to run scripts and ActiveX components on the server to create dynamic content in Hypertext Markup Language (HTML) for powerful Web-based applications.

active/active A cluster configuration in which an application is concurrently executed on all nodes of the cluster.

active/passive A cluster configuration in which an application is executed only on one node of the cluster at a time.

ActiveX Control A software module based on ActiveX technology that can be implemented as a component in a client/server or Web-based business application. ActiveX controls are often referred to as reusable software components.

ActiveX Data Objects (ADO) A high-level interface to access structured and unstructured data in data sources of any kind, such as structured database management systems (DBMS) or unstructured files systems. ADO provides a single interface for multitier client/server and Web-based business application development.

ADC See Active Directory Connector (ADC).

address book Displays recipient information from a directory, such as Active Directory. Users can work with server-based address books maintained centrally or with personal address books. Address books contain one or many address lists. See also address list.

address list A logical collection of recipient objects (that is, mailbox-enabled accounts, distribution groups, mail-enabled contacts, and public folders) in the address book, organized by recipient attributes. An example of an address list is the Global Address List (GAL), where all recipient objects of an organization are displayed.

address space A definition of an address mask associated with a cost factor assigned to a messaging connector to identify recipients for which the connector is responsible. The routing engine of Microsoft Exchange 2000 Server relies on address spaces to select the connectors that are candidates for routing a particular message.

address template A set of instructions that determine the controls displayed in address dialog boxes. You can customize the address templates on a server to change the user interface in the client's address book. Address templates are language specific.

ADE See Automatic Directory Exchange (ADE).

Administration Delegation Wizard An administrative tool to facilitate the delegation of control for Active Directory objects, such as computers and organizational units (OUs), to a user or group. The Administration Delegation Wizard is often called the Delegation Of Control Wizard.

administrative group A collection of Microsoft Exchange 2000 servers and configuration objects that are grouped together for common administration and system management. An administrative group can contain recipient and system policies, routing groups, public folder hierarchies, servers, virtual server resources, and other administrative elements.

ADMINSCH mailbox A special mailbox in a Microsoft Mail for PC Networks (MS Mail) postoffice used to propagate free/busy information across the messaging environment. Active Microsoft Schedule+ distribution processes (SCHDIST.EXE) receive free/busy updates through messages sent to the ADMINSCH mailbox.

ADMINSCH user agent A component of the Schedule+ Free/Busy Connector that allows Microsoft Exchange 2000 Server to participate in the distribution of free/busy information with Microsoft Mail (MS Mail). The ADMINSCH user agent in Exchange 2000 Server corresponds to an ADMINSCH mailbox in MS Mail.

ADO See ActiveX Data Objects (ADO).

ADSI See Active Directory Service Interface (ADSI).

ADSI Edit A Microsoft Management Console (MMC) snap-in to directly access and edit directory information based on Active Directory Service Interface (ADSI).

ADSI provider A system component that provides Active Directory Service Interface (ADSI) client applications access to a directory system by providing an ADSI implementation.

Advanced Queuing Engine A central module of the Simple Mail Transfer Protocol (SMTP) service transport in Microsoft Exchange 2000 Server. Every message is routed through this engine for categorization, message routing, and custom processing though event sinks. The Advanced Queuing Engine acts as an information controller that retrieves messages directly from the Information Store service.

alternate hierarchy An additional public folder hierarchy created in Microsoft Exchange 2000 Server to create and organize public folder resources in a separate tree from the default hierarchy. Alternate hierarchies are only available to Internet-based clients and applications that use the Microsoft Web Storage System. Messaging Application Programming Interface (MAPI)-based clients, such as Microsoft Outlook 2000, are unable to display alternate hierarchies. See also MAPI-based hierarchy, public folder hierarchy.

Ambiguous Name Resolution (ANR) The process of resolving a string to a full recipient object from an address book based on a set of attributes defined for ANR searches.

American Standard Code for Information Interchange (ASCII) A coding scheme that was developed in 1968 to standardize data transmission between disparate computer systems. ASCII assigns numeric values of seven bits to up to 128 letters, numbers, and special characters.

ANR See Ambiguous Name Resolution (ANR).

API See application programming interface (API).

API Gateway An optional Novell GroupWise component that serves as a universal gateway to non-GroupWise systems. The Connector for Novell GroupWise uses the API Gateway for message transfer and directory synchronization between Microsoft Exchange 2000 Server and GroupWise.

AppleTalk A suite of protocols that allow Apple Macintosh computers to communicate over a network infrastructure. AppleTalk enables the systems on a network to interact and route data for file sharing, printer access, and other communication. Microsoft Windows 2000 Server can participate in an AppleTalk network through its Services for Macintosh.

application event log A repository maintained by the Windows 2000 Event Log service to write events provided by application-based processes and services running on the computer to a local log file. Events are written to the application event log in the order in which they are received. You can use the Event Viewer to display the history of events.

Application Note WA0725 A document provided by Microsoft Product Support Services (PSS) that outlines the Directory Synchronization Protocol utilized in Microsoft Mail for PC Networks. WA0725 contains low-level utilities to reset directory synchronization processes.

application programming interface (API) A set of methods, properties, and events provided to developers to enable them to use other software components or services from the operating system. An API typically defines how methods should be called, properties accessed, and results obtained.

application sharing A means to share applications, including presentation graphics, word processing, and spreadsheet software, in a real-time data conference with meeting participants. Microsoft NetMeeting supports application sharing.

ASCII See American Standard Code for Information Interchange (ASCII).

ASP See Active Server Page (ASP).

asynchronous communication A form of electronic communication that allows communication partners to exchange information independently of timing mechanisms.

asynchronous event An event in the transport or Web Storage System of Microsoft Exchange 2000 Server that is fired after a condition has occurred. Asynchronous events do not block the event source and cannot gain exclusive control over the item that triggered the event.

attribute An informational element of an object that describes an object characteristic, such as the display name of a recipient object in Active Directory. Attributes consist of a type identifier and one or more values. For each object class, the directory schema defines mandatory and optional attributes.

attribute mapping file A file containing a set of attributes from one directory that are mapped to a set of attributes in another directory for the purposes of directory synchronization.

audio and video conferencing A technology that enables computer systems to interoperate and exchange audio and video information over a network.

authentication The validation of user credentials during a logon processes. Based on the logon information, the user is associated with an account that allows Microsoft Windows 2000 Server to determine access permissions for the user. When a user logs on to an Active Directory account, a domain controller is used to perform the authentication.

author mode A mode of the Microsoft Management Console (MMC) where all rights are granted to the user that opened the console. Author mode allows you to create custom MMC consoles for delegation of administration. See also user mode.

authoritative restore A specific restore operation on a Microsoft Windows 2000 domain controller in which the objects in the restored directory are treated as most recent (authoritative). Through directory replication, all existing replicas of the directory objects will be replaced through the restored information. Authoritative restore is applicable only to replicated system state data such as Active Directory.

Automatic Directory Exchange (ADE) A mechanism to propagate address information across a Lotus cc:Mail network that contains multiple post offices.

Automatic Profile Generator A program (NEWPROF.EXE) that, in conjunction with a profile descriptor file (.prf), automatically creates Messaging Application Programming Interface (MAPI)-based profiles without user intervention.

automatic property promotion A mechanism in Microsoft Exchange 2000 Server where an associated stream content of an item with a particular file extension is automatically parsed for properties, which are promoted to the Messaging Application Programming Interface (MAPI)-based information store.

B

backfill The process of acquiring public folder replication data when a new replica is added to a server, when replication messages are lost, or when a server is restored from backup. When a server determines that it does not contain a complete replica of a public folder, it generates a backfill request to other servers, which indicates the missing information.

backup domain controller (BDC) A computer running Microsoft Windows NT Server that receives a read-only copy of a Windows NT Server domain's directory database to authenticate users. This read-only copy is synchronized periodically and automatically with the master copy that is kept on the primary domain controller. See also primary domain controller (PDC).

bandwidth A term used to describe the maximum speed throughput of communication in a network expressed in bits per second (bps). A greater bandwidth indicates greater capacity for bulk data-transfer capabilities between computers in a network.

Banyan Vines An acronym for Banyan Virtual Networking System, which addresses a collection of networking products from Banyan Systems.

Basic (Clear Text) Authentication An authentication method that encodes user name and password in clear text for transmission to an authenticating server system. Because the user credentials are kept in clear text that is nonencrypted, a special decoding utility is not required to access security-related information. Basic (Clear Text) Authentication is less secure then challenge/response or Kerberos authentication. See also challenge/response authentication, Kerberos authentication.

Basic Encoding Rules (BER) A set of rules used to encode data into a stream of bits for external storage or transmission. The Lightweight Directory Access Protocol (LDAP) uses a BER encoding method for data transmission over TCP/IP. See also Lightweight Directory Access Protocol (LDAP).

BBS See bulletin board system (BBS).

BDC See backup domain controller (BDC).

BER See Basic Encoding Rules (BER).

binary large object (BLOB) A data column in a database table containing binary data such as graphics, sound, or compiled code. Link state information is transferred as a BLOB between routing groups, for instance over X.400.

Bindery A directory database in Novell NetWare 2.x and 3.x that contains organizational and security information about users and groups. Later versions of Novell NetWare support Bindery in a special mode called Bindery emulation.

binding order The order in which installed network components are linked together to allow the components to communicate with each other. Bindings can be enabled and disabled based on the network components required for communication.

bottleneck A condition that causes an entire system to perform poorly; the resource that limits the performance of a system.

bridgehead server An e-mail system, such as an Exchange 2000 server, that runs connector software and acts as the endpoint of a connection between two routing groups or a connection to a foreign messaging system. In Microsoft Exchange 2000 Server, bridgeheads are responsible for message routing across the routing group boundary.

broadcast A data transmission sent simultaneously to all computers in a network. In practice, broadcasts are only received on local networks, because routers are configured not to forward them. See also IP multicast.

brute-force attack A method of obtaining account passwords by trying all possible password combinations until the correct password is disclosed. A specific form of a brute-force attack is a dictionary attack, in which known words in the dictionary and common password combinations are tried.

buddy list Enables Internet users to see presence information for colleagues and friends that use the same Internet service provider (ISP). The buddy list indicates whether friends are online, out of the office, or busy.

bulk encryption key A security string that is used for both encryption and decryption of information. Advanced Security features of Microsoft Exchange 2000 Server use a bulk encryption key in conjunction with public sealing keys to encrypt messages. See also encryption.

bulk encryption lockbox A bulk encryption key that is encrypted with a recipient's public sealing key. The bulk encryption lockbox is sent with the message. Only the correct recipient can decrypt the lockbox using his or her private sealing key to retrieve the bulk encryption key, which is required to decrypt the e-mail message. The lockbox ensures that the bulk encryption key is sent to the recipient in a secure way.

bulletin board system (BBS) A computer system for subscribers to share information and collaborate on. It was a popular forum for chat and online games, but the Internet has increasingly superseded the BBS.

business application A computer program or a group of Active Server Pages (ASP) that perform business-related tasks and incorporate business-specific regulations, policies, and procedures.

C

CA See certificate authority (CA)

Calendar Connector A connector component in Microsoft Exchange Server 5.5 that allows Exchange users and Lotus Notes or Novell GroupWise users to query each other's calendars for free/busy information.

categorizer A component that performs directory lookups to check message transfer limits and restrictions in Active Directory. It also handles the expansion of distribution groups for message routing.

CDO See Collaboration Data Objects (CDO).

CDO Calendaring A set of functions that allows developers to use Collaboration Data Objects (CDO) to create business applications for creating appointments and accepting and declining meeting requests.

CDO for Exchange 2000 Server (CDOEX) A development technology available with Microsoft Exchange 2000 Server that simplifies writing programs that work with messages, calendars, and contacts. CDOEX is based on the features of the Microsoft Web Storage System and can only be used directly on an Exchange 2000 server.

CDO for Exchange Management (CDOEXM) A development technology available with Microsoft Exchange 2000 Server that allows developers to use Collaboration Data Objects (CDO) instead of Active Directory Service Interface (ADSI) to implement management functionality in business applications. Using CDOEXM, it is possible to create mailbox-enabled user accounts, assign pubic folder hierarchies with information stores, and mount or dismount mailbox and public stores.

CDO for Windows 2000 Server (CDOSYS) A set of programmable objects that enable developers to programmatically access Simple Mail Transfer Protocol (SMTP) and Network News Transfer Protocol (NNTP) stacks on a computer running Microsoft Windows 2000 Server.

CDO for Workflow (CDOWF) A set of programmable objects that simplify the implementation of workflow processes, such as document tracking and approval, into Microsoft Exchange 2000 Server.

CDOEX See CDO for Exchange 2000 Server (CDOEX).

CDOEXM See CDO for Exchange Management (CDOEXM).

CDOSYS See CDO for Windows 2000 Server (CDOSYS).

CDOWF See CDO for Workflow (CDOWF).

centralized administration An administration model that enforces centralized control of system management with a hierarchical delegation of control.

certificate authority (CA) An entity or organization that issues, manages, and revokes digital certificates. CAs can be either commercial or organizational and can form the basis for secure communication and authentication.

certificate revocation list (CRL) A document that contains a list of certificates that have been revoked by a certificate authority (CA).

Certificate Service A component of Microsoft Windows 2000 Server, which can act as a certificate authority (CA) in a public-key infrastructure (PKI) to issue and manage X.509 certificates. See also X.509 certificate.

certificate trust list (CTL) A set of certificates determined to be trustworthy by an organization. A CTL allows the organization to specify the purpose and validity period of certificates issued by external certificate authorities (CAs).

chat A technology that allows users to take part in online discussions using an Internet Relay Chat (IRC) or Internet Relay Chat Extension (IRCX)-based client. Users can communicate with each other by typing their messages via the keyboard. See also Internet Relay Chat (IRC), Internet Relay Chat Extension (IRCX).

chat bans Provide a mechanism to control a chat communication. The creator of a chat channel that acts as the host can exclude (ban) users from a chat channel or restore (unban) a participant.

chat channel Also known as a chat room, a place where chat users meet and enter into private or group conversations on different topics. Microsoft Exchange 2000 Server supports permanent, auditorium-style chat channels that support large audiences and enable users to send questions to a speaker who shares responses with the entire audience. Individual chat users with appropriate privileges can create dynamic channels using an Internet Relay Chat (IRC) or Internet Relay Chat Extension (IRCX) client.

chat community A set of chat users and channels, configured for an instance of a chat service. A chat community is a virtual entity with its own administrative controls.

chat room See chat channel.

Checkpoint Manager A cluster service that logs changes to the Registry to the quorum disk for those keys that are registered for checkpointing in a log file maintained by the quorum resource.

child object An object in a hierarchy that is the immediate subordinate of exactly one parent object. A child object can be the parent of other child objects.

Cisco Local Director A system that manages the distribution of network traffic to multiple servers for load balancing and fault tolerance.

client Any computer or program that connects to another computer or program to request services.

Client Access License A special license to allow client computers legal access to server resources. The number of Client Access Licenses purchased from Microsoft determines the maximum number of clients allowed to access a server.

Client for Microsoft Networks A file system driver used to communicate with a server process over the network based on the Server Message Block (SMB) NetBIOS protocol. See also Network Basic Input/Output System (NetBIOS), Server Message Block (SMB).

client/server conferencing A data conferencing model in which a server-based multipoint control unit (MCU) assumes the role of central control station. Conference participants can connect to the central server to send and receive data over a single connection, while the server keeps all clients synchronized. See also peer-to-peer conferencing.

client/server technology A computer technology by which client applications running on workstations access services on remote servers over a computer network. The client application provides the user interface and the server provides the centralized processing logic for multiple users.

cluster A set of computers that work together to provide services to client applications based on a common virtual server. Clusters enhance the system availability and scalability. See also virtual server.

Cluster Administrator An application (CLUADMIN.EXE) that allows an administrator to configure cluster nodes, groups, and resources. See also cluster.

cluster-aware application An application or service that can run on a server cluster node, that can be managed as a cluster resource, and that uses the Cluster API to interact with the server cluster environment.

Cluster service The primary executable (CLUSSVC.EXE) of the Windows clustering system that creates a server cluster, controls all aspects of its operation, and manages the cluster resources. The Cluster service is executed on every node in a server cluster.

CoClass An acronym that refers to the globally unique identifier (GUID) and the supported interfaces for a Component Object Model (COM) class. CoClasses, also known as COM Classes, provide public methods, properties, and events to client applications.

Collaboration Data Objects (CDO) A technology designed to simplify the creation of messaging applications based on Component Object Model (COM). CDO version 1.2.1, which comes with Microsoft Exchange Server 5.5 and later, as well as Microsoft Outlook 2000, is a Message Application Programming Interface (MAPI)-based technology. CDO for Microsoft Exchange 2000 Server, on the other hand, is based on the features of the Microsoft Web Storage System. See also CDO for Exchange 2000 Server (CDOEX), Web Storage System.

COM See Component Object Model (COM).

COM+ The implementation of Component Object Model (COM) in Microsoft Windows 2000 Server. See Component Object Model (COM).

COM Class See CoClass.

comma-separated value (.csv) import/export file A .csv file that can be used with the Comma Separated Value Directory Exchange (CSVDE) Windows 2000 command-line utility to import or export objects to and from Active Directory. The first row in the .csv file identifies the directory attributes that follow for the objects in subsequent rows. Commas separate the columns in each row. Microsoft Excel CSV can be used to work with .csv files. See also Comma Separated Value Directory Exchange (CSVDE).

Comma-Separated Value Directory Exchange (CSVDE) A Microsoft Windows 2000 command-line utility to import or export objects to and from Active Directory in comma-separated value (.csv) file format. See also comma-separated value (.csv) import/export file.

Communications Manager A process in a server cluster that manages the communication with all other nodes in the cluster.

Component Object Model (COM) An object-based programming model designed to promote software interoperability. COM allows developers to reuse other software components in their own applications even if these components were written in different programming languages and run on different operating systems. COM is the foundation of ActiveX, Collaboration Data Objects (CDO), and object linking and embedding (OLE) technology.

conference calendar mailbox A special mailbox used by the Conference Management Service to maintain a synchronized meeting definition for conferencing providers and to keep track of new meetings, changes to existing conferences, and cancellations. See also conferencing providers.

Conference Management Service The core component of Microsoft Exchange 2000 Conferencing Server, which controls installed conferencing providers, such as the Data Conferencing Provider and Video Conferencing Provider, and manages online meetings.

conferencing providers A component of the Microsoft Exchange 2000 Conferencing Server that supports a particular technology for data or video conferencing. See also Conference Management Service.

confidentiality A basic feature of computer security that provides assurance that only authorized users can read or use sensitive information.

Configuration Connection Agreement (ConfigCAs) A special connection agreement supported only by the Active Directory Connector (ADC) of Microsoft Exchange 2000 Server that replicates configuration data from Exchange Server 5.5 sites to administration groups in Active Directory. Directory replication is performed between Exchange Server 5.5 and Site Replication Service (SRS), and then between SRS and Active Directory. See also Site Replication Service (SRS).

Configuration Database Manager A process in a server cluster that maintains the cluster configuration database.

configuration naming context Another term for configuration partition. The configuration naming context forms the contiguous subtree of the configuration partition in Active Directory. See also naming context.

connection agreement A configuration element within an Active Directory Connector (ADC) that updates information between certain parts of Active Directory and an Exchange Server 5.5 directory. A connection agreement details the direction of directory synchronization and other settings that influence how the directories are synchronized.

connectivity The ability of different computer types to exchange information, such as e-mail messages, with one another.

connectivity controller A component in Microsoft Exchange 2000 Server implemented as a Windows 2000 service that provides information about the internal processes of the Connector for Lotus Notes and Connector for Novell GroupWise.

connector A messaging component that transfers e-mail messages between Microsoft Exchange 2000 servers in different routing groups and to other messaging systems.

Connector for Lotus cc:Mail A connector in Microsoft Exchange 2000 Server that supports the transfer of e-mail messages and the synchronization of address information to and from Lotus cc:Mail.

Connector for Lotus Notes A connector in Microsoft Exchange 2000 Server that supports the transfer of e-mail messages and the synchronization of address information to and from Lotus Notes.

Connector for MS Mail A connector in Microsoft Exchange 2000 Server that supports the transfer of e-mail messages and the synchronization of address information to and from Microsoft Mail for PC Networks.

Connector for Novell GroupWise A connector in Microsoft Exchange 2000 Server that supports the transfer of e-mail messages and the synchronization of address information to and from Novell GroupWise.

Connector ID A specific identifier configured as part of a Person document in a Lotus Domino server to support the Connector for Lotus Notes. This connector uses the Connector ID stored in a user ID file to identify itself as a valid Notes user for message transfer and directory synchronization.

Connector postoffice A special postoffice used by the Connector for MS Mail to provide a native MS Mail interface for the Microsoft Exchange 2000 Server organization to remote MS Mail postoffices for message routing purposes. All Exchange users in an organization appear as MS Mail users on the Connector postoffice, although this postoffice does not contain any mailboxes.

connector store A temporary repository used by various connector components to exchange information. The Connectors for Lotus cc:Mail, Lotus Notes, and Novell GroupWise each rely on a connector store for message transfer and directory synchronization.

console tree The left pane in a Microsoft Management Console (MMC) snap-in that displays items in a hierarchical way. See also Microsoft Management Console (MMC).

contact management The maintenance of contact-related information, such as phone numbers, addresses, call histories, and so forth, in a workgroup application for an entire organization or at a personal level.

contact subscription The process of adding a user to the subscriber list of an Instant Messaging (IM) server to receive presence information for the contact in an IM client application, such as Microsoft MSN Messenger. See also buddy list.

Control Toolbox A feature of the Microsoft Outlook Forms Designer to add ActiveX and custom controls to an Outlook form. See also Outlook Forms Designer.

copy backup A backup that includes all selected files without marking each file as having been backed up. Copy backups are useful if you want to back up files between normal and incremental backups without changing the context for the next scheduled backup. See also differential backup, full backup, incremental backup.

CRL See certificate revocation list (CRL).

CryptoAPI See Cryptographic Application Programming Interface.

Cryptographic Application Programming Interface (CryptoAPI) An application programming interface (API) in Microsoft Windows 2000 that enables applications to encrypt or digitally sign data in a flexible manner while providing protection for private keys. Independent cryptographic service providers (CSPs) perform the actual cryptographic operations. See also cryptographic service provider (CSP).

cryptographic service provider (CSP) A software module that contains implementations of cryptographic standards and algorithms to perform cryptography operations such as secret key exchange, digital signing of data, and public key authentication.

cryptography The science of information security that deals with data confidentiality, integrity, authentication, and nonrepudiation. See also authentication, confidentiality, integrity, nonrepudiation.

CSVDE See Comma-Separated Value Directory Exchange (CSVDE).

CTL See certificate trust list (CTL).

custom controls A software component that adheres to the ActiveX programming model to perform tasks not supported by predefined controls.

custom recipient A recipient in a foreign system whose address is in the server-based address book of Microsoft Exchange Server 5.5 and earlier versions. In Microsoft Exchange 2000 Server, mail-enabled contact objects replace custom recipients. See also mail-enabled contacts.

D

DACL See discretionary access control list (DACL).

DAPI See Directory Application Programming Interface (DAPI).

Data Encryption Standard (DES) A specification for encryption of computer data that uses a 56-bit encryption key. DES was originally developed by IBM and adopted by the U.S. government as a standard in 1976.

data source name (DSN) The name assigned to an object linking and embedding (OLE) DB connection. Applications can use DSNs to request a connection to an OLE DB data source. See also Exchange OLE DB provider (ExOLEDB).

database A collection of information and objects organized in tables and other structures to facilitate searching, sorting, and recombining data.

database file A file in which a database is stored. Databases in Microsoft Exchange 2000 Server are stored in several files.

database management system (DBMS) A repository for a collection of database files that enables users to perform operations on the data.

datagram An unacknowledged packet of data sent to another computer over a network.

DEC ALL-IN-1 A host system for messaging and collaboration from Digital Equipment Corporation.

decentralized administration An administration model that allows decentralized control of system management according to locations, divisions, business units, or other factors. In a decentralized environment, a number of administrators are responsible for managing the network resources.

default policy object A configuration object in Exchange System Manager that applies e-mail address generation rules to all mailbox- and mail-enabled recipient objects in Active Directory that are not covered by another recipient policy. Recipient policies are used by the Recipient Update Service to generate proxy e-mail addresses for recipient objects. See also proxy e-mail address, Recipient Update Service.

defragmentation The process of rewriting parts of a file or sections in a database to contiguous sections to increase system performance.

delegate A person with permission to manage mailbox data for another user. A delegate may be allowed to send mail on behalf of another user, access folders in another user's mailbox, or both.

delegation The process of assigning administrative responsibility to another user or group. In Microsoft Exchange 2000 Server, administration is delegated to other users and groups at the organization and administrative group level using the Delegation of Control Wizard. See also Administration Delegation Wizard.

Delegation of Control Wizard See Administration Delegation Wizard.

delivery confirmation report A report that confirms delivery of an e-mail message to a recipient's mailbox or a foreign e-mail system where the recipient resides. Delivery confirmation reports can be requested for individual messages or for all messages, depending on the client configuration.

delivery restrictions A means to accept or reject messages from any sender listed in Active Directory as a recipient object. You can assign delivery restrictions to any Exchange resource that can receive e-mail messages, such as mailboxes and connectors to foreign systems.

demilitarized zone (DMZ) A small computer network placed as a neutral, nontrusted zone between a private network that requires protection and an outside public network. It prevents users in the public network from getting direct access to resources in the private network. The DMZ is also called a perimeter network.

denial-of-service attack An incident in which a system is overloaded with invalid requests to disable a particular network service or all network connectivity and services. This type of attack is typically launched against Web servers or e-mail systems.

design time license A special license for an ActiveX control that allows developers to use the component in a software development project and in script-based business applications. Many ActiveX controls require both a design time and a runtime license. See also runtime license.

DHTML See Dynamic HTML (DHTML).

diagnostics logging A feature in Microsoft Exchange 2000 Server that determines which events are written to the application event log and other log files for selected services and their internal components. See also application event log.

differential backup A backup that includes only those files created or changed since the last normal or incremental backup. The differential backup does not mark files as having been backed up and it does not change the context for the next scheduled backup. See also copy backup, full backup, incremental backup.

Digest authentication An authentication method that sends user credentials (account name and password) over the network as a hash value to prevent disclosure of security-related information to unauthorized users. See also authentication.

Digital Dashboards A customized solution that displays information from separate data sources in the form of a public folder home page in Microsoft Outlook 2000. A Digital Dashboard pulls together key information sources into a consolidated folder view.

digital signature An advanced security feature that provides assurance that a message originator is indeed the source of a message and verifies that the contents have not been modified during transmission.

directory access cache (DSAccess) Allows the Information Store service and other Microsoft Exchange 2000 Server processes to perform lookups in Active Directory. Results are cached for a period of time to avoid sending the same query to Active Directory again.

Directory Application Programming Interface (DAPI) The legacy application programming interface (API) to perform directory lookups in Exchange Server 5.5 and earlier versions. Microsoft Exchange 2000 Server uses Lightweight Directory Access Protocol (LDAP) instead of DAPI to access information in Active Directory.

directory partition A part of an Active Directory forest that forms a contiguous subtree. Every domain controller has at least three directory partitions: schema, configuration, and domain. The schema and configuration partitions are replicated as single units to every domain controller in the forest. The domain partition is replicated only to the other domain controllers in the local domain. A read-only copy of the domain partition is replicated to Global Catalog servers. See Active Directory forest.

directory service A system service that stores configuration and recipient information about a resources and users, such as administrative groups, recipients, and servers. A directory service enables users and system components to resolve an object based on its attributes to address and route messages. See also Active Directory directory service.

Directory Service Manager for NetWare (DSMN) A component that integrates Novell NetWare servers into Microsoft Windows NT and Windows 2000 Server domains. DSMN can synchronize user and group accounts between Windows NT/2000 and NetWare Bindery.

Directory Service Proxy (DSProxy) A process that acts as a facilitator to allow Messaging Application Programming Interface (MAPI)-based clients to access information within Active Directory. It proxies directory requests on behalf of MAPI-based clients to Active Directory and it refers smart MAPI-based clients directly to Active Directory.

directory synchronization The process of synchronizing Active Directory information with directories from foreign messaging systems, such as Microsoft Mail for PC Networks, Lotus cc:Mail, Lotus Notes, and Novell GroupWise.

Directory Synchronization agent (DXA) The active process that performs directory synchronization with a foreign messaging system.

directory synchronization topology The overall arrangement of active processes and connectors to foreign messaging systems that perform directory synchronization.

Dirsync See directory synchronization.

Dirsync requestor A Microsoft Mail postoffice that sends address list updates to a Dirsync server for the purposes of updating global address information on all postoffices in a Microsoft Mail network. See also Dirsync server.

Dirsync server A special MS Mail postoffice that receives address list updates from Dirsync requestors and incorporates the changes into a master list. The Dirsync server also sends updates to the Dirsync requestors to update their Global Address Lists (GALs). See also Dirsync requestor.

disaster recovery A restore operation with the goal of creating a 1:1 copy of the original server.

discontinuous namespace A namespace that does not have a common parent namespace with other namespaces in the Active Directory forest, but shares schema and configuration partitions with other namespaces (for instance, multiple trees in the same forest). See also namespace.

discretionary access control list (DACL) An element of every object's security descriptor, which contains the access control entries (ACEs) that grant or deny users, groups, or system accounts permissions to access the object. Only the object owner can change the DACL.

distinguished name (DN) A name that uniquely identifies an object as well as its location in a tree. Distinguished Names are commonly used in directory systems, such as Active Directory. An example of a distinguished name is CN=Administrator,CN=Users,DC=Bluesky-inc-10,DC=Com. See also relative distinguished name (RDN).

distributed network A computer network in which individual departments or workgroups set up and maintain their own resources. See also decentralized administration.

distributed processing A form of data processing in which separate computer systems share the workload in a computer network.

distributed transaction coordinator (DTC) A process that coordinates transactions across a computer network to reliably update data that resides on two or more database management systems. An example of a DTC is the Microsoft Distributed Transaction Coordinator (MS DTC), which allows transaction processing monitors to control distributed transactions.

distribution group A group of mailbox- or mail-enabled recipient objects that can be addressed as a single recipient. Administrators can create server-based distribution groups that are available in Active Directory.

distribution list In Microsoft Exchange Server 5.5, a term that describes a recipient object in the directory that holds membership information to allow for a group of recipients to be addressed as a single recipient. In Microsoft Exchange 2000 Server, a distribution group is used to emphasize the integration with Active Directory. See also distribution group.

DLL See dynamic-link library (DLL).

DMZ See demilitarized zone (DMZ).

DN See distinguished name (DN).

DNS See Domain Name System (DNS).

DNS lookup The process of resolving Domain Name System (DNS) names to Internet Protocol (IP) addresses. It is also possible to resolve IP addresses into DNS names, which is known as a reverse DNS lookup.

Doclink A link to a document in a Lotus Notes database that is inserted in a Lotus Notes e-mail message. A Notes doclink provides the user a convenient way to open the document using Lotus Notes client software.

domain A logical arrangement of computers in a network that share a common directory database and security policies.

domain local groups A security group in Active Directory that can contain members from anywhere in the forest, in trusted forests, or in a trusted pre-Windows 2000 domain. Domain local groups are only available in native-mode domains and can only be used to grant permissions to resources within the local domain.

domain mode The configuration of an Active Directory domain in regards to backward compatibility with Microsoft Windows NT Server 4.0. Active Directory domains that operate in mixed mode are fully backward compatible and are therefore restricted to the limitations of the Windows NT 4.0 domain model, such as lack of support for universal security groups. Active Directory domains that operate in native mode are not fully backward compatible, but overcome the limitations of the legacy domain model. In native-mode domains, Windows NT Server 4.0 can only be used on member servers.

Domain Name System (DNS) A collection of distributed databases on domain name servers that provide a means to resolve fully qualified domain and host names into corresponding Internet Protocol (IP) addresses, and vice versa. DNS is used on the Internet and on private TCP/IP networks.

DomainPrep A special mode of the Microsoft Exchange 2000 Server Setup program to prepare a Microsoft Windows 2000 domain for an Exchange 2000 Server organization.

Domino directory The name and address book in a Lotus Domino server.

downstream domains Messaging domains that are reached indirectly through another domain.

DSAccess See directory access cache (DSAccess).

DSProxy See Directory Service Proxy (DSProxy).

DXA See Directory Synchronization agent (DXA).

DXA requestor A Directory Synchronization agent (DXA) configured as a Dirsync requestor in an MS Mail directory synchronization environment. See also Dirsync requestor.

DXA server A Directory Synchronization agent (DXA) configured as a Dirsync server in an MS Mail directory synchronization environment. See also Dirsync server.

Dynamic DNS (DDNS) A feature of Windows 2000 DNS that enables clients and servers to automatically register their Internet Protocol (IP) addresses in a DNS database, eliminating the need to manually define host records. See also Domain Name System (DNS).

Dynamic Host Configuration Protocol (DHCP) A protocol to assign TCP/IP hosts and workstations Internet Protocol (IP) addresses and related configuration information dynamically over the network. It allows for centralized management of IP address allocation, which greatly simplifies the TCP/IP network configuration. DHCP is defined in Request for Comments (RFC) 1541.

Dynamic HTML (DHTML) An extension to Hypertext Markup Language (HTML) that enables developers to create Web pages that dynamically change their content and interact with the user. DHTML is supported by Microsoft Internet Explorer version 4.0 and later.

dynamic-link library (DLL) A file with a .dll extension that contains executable program code, which can be called by a program that requires the features of a specific function or set of functions. Based on the features of the operating system, DLLs can be loaded into memory dynamically, helping to save memory during program execution and enabling code reusability.

E

EDK See Exchange Development Kit (EDK).

EDK-based connector A connector component of Microsoft Exchange 2000 Server that was developed based on the Exchange Development Kit (EDK). EDK-based connectors use Messaging Application Programming Interface (MAPI) to access their message queues in the Information Store and they use Active Directory Service Interface (ADSI) to communicate with Active Directory. See also Active Directory directory service, Active Directory Service Interface (ADSI), Exchange Development Kit (EDK).

EHLO A command to begin an Extended Simple Mail Transfer Protocol (ESMTP) session with a Simple Mail Transfer Protocol (SMTP) host. See also Extended SMTP (ESMTP).

e-mail alias An alternative name assigned to a recipient object. The e-mail alias corresponds to the user-specific part of an e-mail address, such as <E-mail Alias>@Bluesky-inc-10.com.

emergency repair disk A disk that contains information about the system configuration of a Microsoft Windows NT or Windows 2000 installation. You can use the Windows 2000 Backup utility to create an emergency repair disk, which can be used to repair the installation if Windows 2000 fails to start because of corrupted system files.

Encrypting File System (EFS) An extension to the NT file system (NTFS) to apply encryption technology to files on a hard disk. With EFS, data in NTFS files can be stored in such a way that users with physical access to the disk media are denied access to the information without the correct security key.

encryption The process of converting a message or data in such a way that unauthorized users cannot gain access to the information. Encryption is necessary to protect sensitive information from disclosure when sending messages over a public network.

Endpoint Mapper A server-based process that listens on TCP port 135. The Endpoint Mapper is used to retrieve port numbers for connection establishment to server-based services that use dynamically assigned ports. See also port.

End-User License Agreement (EULA) An individual license agreement that represents a contract between the person who acquires a software package and Microsoft. Upon accepting the EULA, a user is granted the right to use the software.

Enterprise Admins A special Microsoft Windows 2000 group that exists only in the root domain of an Active Directory forest. Members of this group are known as enterprise administrators. They are authorized to accomplish forestwide administration in Active Directory, such as adding an Exchange 2000 Server organization to the forest.

Epoxy See Exchange Interprocess Communication (EXIPC).

ESMTP See Extended SMTP (ESMTP).

ETRN See Extended TURN (ETRN).

event binding The association of a transport, protocol, or Microsoft Web Storage System event with an event sink by registering event sinks in the Internet Information Services (IIS) metabase. See also event sink, IIS metabase.

Event Processor A component of the Microsoft Windows 2000 Cluster service that handles common cluster operations and controls Cluster service initialization. See also Cluster service.

event sink Executable program code that is invoked when a specified event occurs. Event sinks can be developed in any Component Object Model (COM)-compliant programming language.

Event Viewer An administrative utility that displays the event logs of a computer running Microsoft Windows 2000. See also application event log.

Exchange Development Kit (EDK) A part of the Microsoft Platform Software Development Kit (SDK) that contains the files and documentation necessary to build the gateway, mailbox agents, administrative components, and other server-based Exchange solutions.

Exchange Form Designer A design tool that enables developers to design 16-bit electronic forms that may be used with Microsoft Exchange Client and Microsoft Outlook.

Exchange Installable File System (ExIFS) A component that provides file system access to the Microsoft Web Storage System. By default, ExIFS maps to the M drive on the computer running Exchange 2000 Server. If this drive is already in use, the next available drive letter is taken.

Exchange Interprocess Communication (EXIPC) A communication layer between Internet Information Services (IIS) processes and the Information Store service for high-speed data transfer between the protocols and database services on an Exchange 2000 server.

Exchange OLE DB provider (ExOLEDB) A software component that implements OLE DB interfaces and provides access to Exchange 2000 Server resources via the Microsoft Web Storage System.

Exchange Routing Engine A component of Exchange 2000 Server that performs message routing within and across routing group boundaries. The routing engine uses link state information (LSI) to automatically generate an optimized messaging topology. See also link state information (LSI).

Exchange System Manager The universal management utility of Microsoft Exchange 2000 Server that allows an administrator with appropriate permissions to manage all aspects of an organization. Exchange System Manager can be launched via the System Manager shortcut from Microsoft Exchange program group.

Exchange Virtual Server (EVS) A virtual instance of an Exchange 2000 server running on a node in a server cluster. Each EVS maintains its own resources as configured using the Cluster Administrator program. An EVS is the unit that can failover to another node. See also Cluster service, failover.

ExIFS See Exchange Installable File System (ExIFS).

EXIPC See Exchange Interprocess Communication (EXIPC).

Exmerge See Microsoft Exchange Mailbox Merge Wizard (Exmerge).

ExOLEDB See Exchange OLE DB provider (ExOLEDB).

expansion server An Exchange 2000 server designated for distribution group expansion. The expansion server can be defined per mail-enabled group in each group's Exchange Advanced tab.

expiration policy A policy that defines when articles in newsgroups expire and will be purged. When newsgroups are maintained in your in public folders, expiration policies are transferred from the Network News Transfer Protocol (NNTP) virtual server to the public store or individual public folder.

export container An organizational unit (OU) that contains recipient objects included in directory synchronization from Exchange 2000 Server to a foreign messaging system.

Extended MAPI An application programming interface (API) that is used for creating advanced messaging-based applications in C/C++.

Extended SMTP (ESMTP) An extension to Simple Mail Transfer Protocol (SMTP) that allows an SMTP server to inform an SMTP client of the extensions it supports. See also Simple Mail Transfer Protocol (SMTP).

Extended TURN (ETRN) An extension to Simple Mail Transfer Protocol (SMTP) that allows an SMTP host to request the message transfer from another SMTP host.

Extensible Markup Language (XML) A metalanguage to create common information formats and to share both the format and the data on the Web.

Extensible Storage Engine (ESE) A universal, transaction-oriented database engine that defines a very low-level application programming interface (API) to underlying database structures. ESE uses log files to ensure that committed transactions are safe. Exchange 2000 Server is based on ESE98. Exchange Server 5.5 and Active Directory use the ESE97 interface.

extension attribute A general attribute of a recipient object in Active Directory to support recipient information not covered by other predefined attributes. Extension attributes are the equivalent of custom attributes in earlier versions of Exchange Server.

external foreign domain An administrative unit in Novell GroupWise, which defines a foreign messaging system that is connected to the local GroupWise domain, typically through a gateway.

F

failback In Windows 2000 Cluster service, the process of moving a failed resource group back to the highest available node in the cluster according to the resource group's list of preferred owners. See also Cluster service.

failover In Windows 2000 Cluster service, the process of taking a resource group offline on a failed cluster node to transfer it to another node in the cluster to bring it back online. See also Cluster service.

Failover Manager A component of the Cluster service that works together in conjunction with the Resource Manager to maintain resources and resource groups. The Failover Manager initiates failover operations if a node is detected as nonoperational. See also Cluster service, Resource Manager.

Fast Ethernet A data transmission standard that provides a theoretical transfer rate of 100 megabits per second. Fast Ethernet is a local area network (LAN)-based technology also referred to as 100BASE-T.

fault tolerance The assurance of data integrity when system failures occur. A fault-tolerant system has the ability to either to continue the operation without data loss or to shut down safely and recover at next restart.

FDDI See Fiber Distributed Data Interface (FDDI).

FFL See folder forms library (FFL).

Fiber Distributed Data Interface (FDDI) A low-level protocol standard developed by the American National Standards Institute (ANSI) that is designed to be used with fiber-optic cabling.

Field Chooser A feature of the Outlook Forms Designer that allows a developer to conveniently place message fields on an Outlook form and to create custom fields. See also Outlook Forms Designer.

field validation A mechanism to prevent invalid user input in fields of an electronic or Microsoft Outlook form.

File and Print Services for NetWare (FPNW) Allows users on NetWare workstations to access files, printers, and applications on a Windows 2000 server as if the machine running Microsoft Windows 2000 Server were a NetWare server.

firewall A security system that prevents unauthorized access from a public network (such as the Internet) to the resources in a private network. A firewall can enforce indirect communication by routing data through a proxy server in a demilitarized zone (DMZ). See also demilitarized zone (DMZ).

firewall topology modulator (FTM) An Instant Messaging component that maintains Internet Protocol (IP)-related information about Instant Messaging servers that are located behind firewalls.

folder agent A script registered with a public folder to implement sophisticated processing of folder contents based on Microsoft Web Storage System events. See also event sinks.

folder forms library (FFL) A location for forms associated with a particular public folder (post forms).

Folder Home Page A feature of Microsoft Outlook 2000 that allows users to associate a folder with a Hypertext Markup Language (HTML) home page. The HTML page replaces the default folder view in the Outlook explorer window, which is the basis for Digital Dashboards and other collaboration solutions. See also Digital Dashboards.

folder rule A means to define actions to take if an item matching certain criteria is placed in a folder. Possible actions are forwarding, copying to another folder, generating an automatic response, deleting the item, and so on.

folder views A means to organize and find information in a folder based on defined criteria. Folder views allow the default options to be personalized and optimized so that the items in a public folder are easier to locate.

foreign domain document A document in a Lotus Domino/Notes server that describes a foreign messaging system.

forest See Active Directory forest.

ForestPrep A special mode of the Microsoft Exchange 2000 Server Setup program to prepare an Active Directory forest and its schema for an Exchange 2000 Server organization.

forklifting users The process of moving user mailboxes from a server to a different computer or restoring them to a new computer using a backup of the mailbox store databases.

forms adaptivity A feature of the Microsoft Web Storage System to return different Microsoft Web Storage System forms for the same item to specific Web browsers depending on the information supplied in the Hypertext Transfer Protocol (HTTP) request header. See also Web Storage System, Microsoft Web Storage System forms.

forms library A location where electronic forms are stored and made publicly accessible. The four types of forms libraries are organization forms library (OFL), folder forms library (FFL), personal forms library (PFL), and Web forms library (WFL).

FQDN See fully qualified domain name (FQDN).

frame type An identifier that specifies the format for data at OSI Layer 2 packets (frames) that NWLink will transmit over the computer network. The frame type must match on different computers for network communications to succeed. Frame types are most important in Novell NetWare environments, where the format must match on all systems for a communication to happen. Different versions default to different frame types.

free/busy information A feature that allows users to see when other users are free or busy and thus to more efficiently schedule meetings.

free/busy information public folder A hidden folder on an Exchange 2000 server that provides free/busy information to all Exchange users in an organization. See also free/busy information.

Front end/back end configuration (FE/BE) An arrangement of Exchange 2000 servers in which Internet-based clients access a protocol server (the front end), which in turn communicates on behalf of the client with another server in the backbone (the back end) to retrieve the data. A front-end/back-end configuration allows for a deployment of load-balanced front-end systems, which can act as a single point of contact for all mailbox and public folder data.

FrontPage Extensions Web An extension to Internet Information Services (IIS) that allows a Web designer to create and edit Web sites directly on the server by using Microsoft FrontPage on the client computer.

FTM See firewall topology module (FTM).

full backup A backup, also called a normal backup, of all selected files that marks each file as having been backed up. A full online backup of Exchange databases purges previous transaction log files, thus setting the context for the next scheduled backup. See also copy backup, differential backup, incremental backup.

full-mesh routing A message routing topology where all mail hosts transfer messages directly to each other.

full-text catalog A collection of full-text indexes maintained by a search engine.

full-text indexing The process of creating an index database of searchable text before searches are executed, which makes fast full-text searches possible. With full-text indexing, every word in a mailbox or public store can be indexed. See also full-text search.

full-text search In Microsoft Exchange 2000 Server, a search for one or more items in a mailbox or public store based on the actual message body or document data rather than on an index containing a limited set of keywords.

fully qualified domain name (FQDN) A Domain Name System (DNS) name that consists of a host name and the full domain name to indicate the precise location of the host in the domain namespace.

G

gateway A communication component that connects an Exchange 2000 Server organization to a foreign messaging system. Typical tasks of a gateway include message conversion and translation of recipient information.

Gateway (and Client) Services for NetWare (GSNW) An additional network component that enables Microsoft Windows 2000 Server to access resources on NetWare servers. GSNW also enables Windows 2000 Server to act as a gateway to NetWare servers.

Gateway Address Routing Table (GWART) The primary routing mechanism for the Message Transfer Agent (MTA) in earlier versions of Microsoft Exchange Server. Exchange 2000 Server generates a GWART containing all message routes and their cost factors only for the purposes of backward compatibility. Message routing in Exchange 2000 Server uses a link state table (LST) instead of a GWART. See also link state information (LSI), link state table (LST).

gateway mail file A Lotus Notes database where outbound messages to a foreign domain, such as Microsoft Exchange 2000 Server, are delivered by the Lotus Notes Mail Router process. See also Lotus Notes Mail Router.

GDI See global domain identifier (GDI).

Global Address List (GAL) A virtual container in the address book that lists all recipient objects of an organization that are made visible in the address book.

Global Catalog An Active Directory domain controller that maintains a partial, read-only replica of all domains in the forest in addition to the schema, configuration, and local domain partitions. The Global Catalog can answer Lightweight Directory Access Protocol (LDAP) queries directed to TCP port 3268 with information about all objects in the forest according to the attributes included in Global Catalog replication. A domain controller can be configured as a Global Catalog using the Active Directory Sites and Services snap-in.

global domain identifier (GDI) An identifier that uniquely identifies an X.400 management domain for the purposes of message loop detection. The GDI is added as external trace information to every X.400 message that passes through the management domain. A GDI is typically defined by the country (C), administrative management domain (ADMD), and private management domain (PRMD) portions of the X.400 address space.

global group A group in Active Directory that can be granted rights and permissions to resources in its own domain and in trusting domains, such as other domains in the same forest. A global group can only contain user and group accounts from its own domain.

Global Update Manager A component of the Cluster service that provides a global service used by other components within the server cluster to replicate changes to the cluster database across all nodes. See also Cluster service.

globally unique identifier (GUID) A 128-bit identifier that is supposed to be guaranteed unique across all computer systems worldwide.

group policy A feature that allows an administrator to control how programs and network resources can be used. Group policies can be applied to users and computers based on their membership in sites, domains, or organizational units (OUs).

GroupWise administrator message An e-mail message in a Novell GroupWise environment with a special message type of Admin, which contains instructions for GroupWise to accomplish management tasks, such as the creation or deletion of recipient information.

GroupWise domain A management unit in Novell GroupWise that contains one or many post offices and a message transfer agent (GroupWise MTA). See also GroupWise Message Transfer Agent.

GroupWise Gateway for Microsoft Exchange A Novell GroupWise component that can be used to connect GroupWise to earlier versions of Microsoft Exchange Server.

GroupWise Message Transfer Agent The active process in a Novell GroupWise domain that performs message routing between GroupWise post offices and GroupWise domains.

GroupWise MTA See GroupWise Message Transfer Agent.

GSNW See Gateway (and Client) Services for NetWare (GSNW).

GUID See globally unique identifier (GUID).

GWART See Gateway Address Routing Table (GWART).

H

H.323 A standard of the International Telecommunications Union (ITU) that specifies how multimedia systems can communicate over networks that do not support Internet Protocol (IP) multicasting. H.323 is used for point-to-point audio and video conferencing. See also audio and video conferencing.

H.323 Video Conference Bridge A component of Microsoft Exchange 2000 Conferencing Server that allows H.323-compliant client programs that are unable to participate directly in Internet Protocol (IP) multicast conferences, such as NetMeeting, to participate in videoconferences through a H.323 unicast session.

hard recovery The process of applying transaction logs and patch files restored from a backup to a mailbox or public store.

heartbeat A periodic message exchanged between nodes in a server cluster or network load balancing cluster to detect system failures.

home server The Exchange 2000 server that maintains the mailbox store where a user's mailbox is located.

hot fixes Very specific fixes to known problems reported by customers, but not yet regression tested.

hot spare An idle node in a server cluster that is ready to be used whenever a failover occurs. See also Cluster service, failover.

HTML See Hypertext Markup Language (HTML).

HTTP See Hypertext Transfer Protocol (HTTP).

Hypertext Markup Language (HTML) A markup language (set of tags) that Web authors can use to create and design Web pages.

Hypertext Transfer Protocol (HTTP) A protocol to transfer hypertext information (for example, Web pages) to Web browsers over TCP/IP.

I

iCalendar Astandard to send and receive meeting requests and responses over the Internet.

IETF See Internet Engineering Task Force (IETF).

IIS See Internet Information Services (IIS).

IIS metabase The repository of Internet Information Services (IIS) configuration settings. The IIS metabase performs some of the same functions as the system Registry of Microsoft Windows 2000 Server.

IMAP4 See Internet Message Access Protocol version 4 (IMAP4).

import container An organizational unit (OU) that receives recipient objects created during directory synchronization with a foreign messaging system. See also export container, organizational unit (OU).

importance levels The priority of an e-mail message rated as low, normal, or important.

IMPP See Instant Messaging Presence Protocol (IMPP).

incremental backup A backup that includes only those files created or changed since the last normal or incremental backup. The incremental backup marks files as having been backed up. An incremental online backup of Exchange databases purges previous transaction log files, thus setting the context for the next scheduled backup. See also copy backup, differential backup, full backup.

independent software vendor (ISV) A software developer or organization that independently provides computer software.

Information Store A core component of Microsoft Exchange 2000 Server that maintains mailbox and public stores and provides other processes and messaging clients with access to the information. See also mailbox store, public store.

inheritance The ability of a newly created child object to automatically receive default values for its attributes from its parent object. For example, a newly created child directory can receive access control settings from its parent container. See also access control, child object.

in-place upgrade A method of upgrading a server running Microsoft Exchange Server 5.5 SP3 directly to Exchange 2000 Server. The Setup program is executed directly on the server, which performs a direct upgrade of existing resources, such as databases and messaging connectors.

Installable File System (IFS) A storage technology that provides access to resources in the form of a filing system. Standard Win32 processes can access the resources similar to files and folders on a hard disk. See also Exchange Installable File System (ExIFS).

instant messages Electronic messages exchanged between Instant Messaging (IM) users in real time. These messages are not stored on disk and are lost when the user closes the IM client application. See also Instant Messaging (IM).

Instant Messaging (IM) A service in Microsoft Exchange 2000 Server that supports real-time messaging and presence information. See also presence information.

Instant Messaging home server The Instant Messaging server that forwards instant messages to a user and maintains his or her presence information and subscriber list. See also Instant Messaging (IM), presence information.

Instant Messaging Presence Protocol (IMPP) A protocol defined by the Internet Engineering Task Force (IETF) to support the exchange of presence information across different computer platforms on the Internet. Instead of IMPP, Microsoft Exchange 2000 Server uses a proprietary published protocol called Rendezvous Protocol (RVP) to communicate with Instant Messaging clients. See also presence information, Rendezvous Protocol (RVP).

Instant Messaging router A special virtual server in an Instant Messaging (IM) domain that provides a means for external users to communicate with users in the domain. The IM router must be registered in DNS to receive instant messages from external users, which it forwards to the user's home server. See also Instant Messaging home server.

Integrated Services Digital Network (ISDN) A digital telephone and telecommunications network that supports transmission speeds of 64 kilobits per second over a single ISDN channel. ISDN channels can be bundled together to achieve higher transmission rates.

integrity A basic feature of computer security that provides confirmation that the original information has not been altered or corrupted. Hash functions are used to create a cryptographic checksum, which can be checked to verify data integrity.

internal network number An identifier of a virtual Internetwork Packet Exchange (IPX) network inside a computer for addressing and routing purposes. The internal network number is 4 bytes in length and must be unique to the IPX internetwork. See also Internetwork Packet Exchange/Sequenced Packet Exchange (IPX/SPX).

International Telecommunications Union (ITU) An organization based in Geneva, Switzerland, that coordinates, develops, and standardizes global telecommunications networks and services.

Internet access protocols Protocols that allow Internet users access to messaging-related information in mailboxes, newsgroups, public folders, and directories. Typical Internet access protocols are HTTP, POP3, IMAP4, NNTP, and LDAP.

Internet Assigned Numbers Authority (IANA) An organization that assigns Internet Protocol (IP) addresses to organizations on the Internet.

Internet Engineering Task Force (IETF) A consortium that issues standards for new technology on the Internet in specifications called Requests for Comments (RFCs). See also Request for Comments.

Internet Information Services (IIS) A collection of network and application services integrated into Microsoft Windows 2000 Server that supports multiple Internet access protocols, such as Hypertext Transfer Protocol (HTTP), Simple Mail Transfer Protocol (SMTP), Network News Transfer Protocol (NNTP), and others. Exchange 2000 Server extends the IIS to provide additional functionality.

Internet Message Access Protocol version 4 (IMAP4) A popular Internet access protocol for e-mail messaging. IMAP4 allows an Internet client to access server-based message folders and items without downloading them to the local computer.

Internet Network Information Center (InterNIC) The coordinator of domain names and Internet Protocol (IP) addresses registered in Domain Name System (DNS) on the Internet. See also Domain Name System (DNS).

Internet Protocol (IP) The protocol in a TCP/IP-based network that provides a connectionless delivery system. IP routes messages from one host to another, but it does not guarantee that packets arrive at their destination or that they are received in sequential order.

Internet Protocol Security (IPSec) An industry standard for cryptography-based protection of TCP/IP-based network communication.

Internet Relay Chat (IRC) A protocol that enables a group of people to hold real-time conversations via a chat server. The current version of IRC is defined in Request for Comments (RFC) 1459. See also chat, Internet Relay Chat Extension (IRCX).

Internet Relay Chat Extension (IRCX) A protocol originally developed by Microsoft to extend the standard IRC functionality, which added additional client and server commands, user modes, and security. See also chat, Internet Relay Chat (IRC).

Internet Server Application Programming Interface (ISAPI) An application programming interface that allows developers to program Internet Information Services (IIS) extensions. Outlook Web Access (OWA) of Microsoft Exchange 2000 Server, for instance, is implemented as an ISAPI component. See also Internet Information Services (IIS).

Internet service provider (ISP) An organization that provides access to the Internet through dial-up connections or leased lines. ISPs typically maintain systems that are directly connected to the Internet to provide their services to remote users.

Internetwork Packet Exchange/Sequenced Packet Exchange (IPX/SPX) A network protocol that is typically used in Novell NetWare environments to govern addressing and routing of data packets within and between local area networks (LANs). Newer versions of NetWare support TCP/IP, which can replace IPX/SPX.

interprocess communication (IPC) A mechanism that allows bidirectional communication between programs, services, and multiuser processes running on the local computer or remote computers. IPC is used to support distributed processing. See also Exchange Interprocess Communication (EXIPC).

IP multicast A mechanism to send Internet Protocol (IP) traffic to a single destination IP address, while the data is received and processed by multiple IP hosts, regardless of their location on the network. A host can accept traffic for a specific IP multicast address. Intermediary IP routers must be capable of routing IP multicast traffic to subnets with hosts that have registered interest in the data.

IPC See interprocess communication (IPC).

IPSec See Internet Protocol Security (IPSec).

IPX/SPX See Internetwork Packet Exchange/Sequenced Packet Exchange (IPX/SPX).

IRC See Internet Relay Chat (IRC).

IRCX See Internet Relay Chat Extension (IRCX).

ISAPI See Internet Server Application Programming Interface (ISAPI).

ISDN See Integrated Services Digital Network (ISDN).

ISP See Internet service provider.

ISV See independent software vendor (ISV).

ITU See International Telecommunications Union (ITU).

J

JavaScript A scripting language that is syntactically similar to Java, which was developed by Netscape Communications to develop dynamic Web pages. JavaScript is standardized by the ECMA 262 language specification.

Joint Engine Technology (JET) A low-level, transaction-oriented database technology used in Exchange Server 5.0 and earlier versions. Later versions of Exchange Server use Extensible Storage Engine (ESE) instead of JET. See also Extensible Storage Engine (ESE).

JScript Microsoft's implementation of JavaScript that complies with the ECMA 262 language specification.

K

Kerberos authentication An authentication mechanism used to verify user or server identity for the secure use of distributed software components. Microsoft Windows 2000 Server uses the Kerberos version 5 protocol as its default authentication service. See also authentication.

Kerberos protocol An authentication protocol that is defined in Request for Comments (RFC) 1510. See also Kerberos authentication.

key distribution center (KDC) A Kerberos service that generates session tickets and temporary session keys for Kerberos authentication. To support Kerberos authentication in Microsoft Windows 2000, the KDC runs on all domain controllers in the Active Directory forest. See also Kerberos authentication.

key history A list of expired or revoked security keys associated with a user's mailbox that may be required to decrypt existing sealed messages. See also message sealing.

key management The management of security keys for users in an organization to support public key cryptography. See also Key Management Service (KMS).

Key Management server (KM server) An Exchange 2000 server that is running the Microsoft Exchange Key Management Service (KMS) to maintain advanced security information. See also Key Management Service (KMS).

Key Management Service (KMS) An optional service of Microsoft Exchange 2000 Server that integrates with Microsoft Windows 2000 Certificate Services to issue security certificates for Exchange users. The KMS also maintains a key history for those users for whom it issued certificates. See also key history.

key recovery The process of recovering and reissuing lost security keys based on a key history to allow a user to continue working with encrypted messages. See also key history.

key revocation The process of canceling a user's security keys by adding the user's X.509 certificate to a revocation list. This is not the same as deleting the security keys. The old keys may still be used to work with existing sealed messages. See also key recovery, X.509 certificate.

keyword-based text file An ASCII file that contains keywords describing message properties and contents, which is used by the Novell GroupWise API Gateway for message transfer and directory synchronization. See also API Gateway.

KM database master encryption key The password for the Key Management Service (KMS) to decrypt the service's key management database. Without a valid password, the KMS cannot start. See also Key Management Service (KMS).

KMS See Key Management Service (KMS).

L

LAN See local area network (LAN).

latency The delay with which updates are replicated between instances of the same replica. The latency is the gap between the time a given replica is changed and the time the update is applied to other replicas of the same resource.

Layer Two Tunneling Protocol (L2TP) A tunneling protocol at the data-link layer that can be used to establish a virtual private network (VPN) over the Internet. See also (VPN).

LDAP See Lightweight Directory Access Protocol (LDAP).

LDIF Directory Exchange Tool (LDIFDE) A command-line utility that allows an administrator to import, modify, delete, and export objects to and from Active Directory based on an .ldf file according to the LDIF file format standard.

LDIFDE See LDIF Directory Exchange Tool (LDIFDE).

leapfrog upgrade A method of upgrading an earlier version of Microsoft Exchange Server to Exchange 2000 Server in which the new platform is installed on a different server. Mailboxes, public folders, and other resources are then moved from the old server to the new server before the earlier version of Exchange Server is uninstalled. The old computer hardware may then be used to install another Exchange 2000 server to continue the upgrade process. The upgrade cycle repeats until all servers running earlier versions are upgraded.

Lightweight Directory Access Protocol (LDAP) An open standard designed to provide access to directory services based on X.500 without the overhead of the Directory Access Protocol (DAP). LDAP is defined in Request for Comments (RFC) 1777.

link state algorithm (LSA) The algorithm used to propagate link state information (LSI) between Exchange 2000 servers in a routing group and between routing groups. Within a routing group, LSI is propagated over TCP port 691. Between routing groups, the X-LINK2STATE command is used to pass the information to the Simple Mail Transfer Protocol (SMTP) service. X.400 connectors propagate LSI in a binary large object (BLOB) before sending messages. See also binary large object (BLOB), link state information (LSI).

link state information (LSI) Information that Microsoft Exchange 2000 Server uses for the purposes of message routing to determine whether connectors are working. Messages are not routed to connectors that are marked as down. See also link state algorithm (LSA), link state table (LST).

link state table (LST) The repository of link state information (LSI), which is used for message routing in Microsoft Exchange 2000 Server. The LST replaced the Gateway Address Routing Table (GWART) of earlier versions of Exchange Server. Among other things, the LST provides information about connectors and servers across the entire organization. See also link state information (LSI), routing group master (RGM).

load balancing A means to distribute client connections across multiple servers. Sophisticated load-balancing solutions can distribute the workload equally across all hosts or according to a load percentage.

local area network (LAN) A communications network within a geographically close area that uses a protocol that allows any connected device to interact with any other system on the network. A very popular protocol used in LAN environments is TCP/IP.

local replication Offline folder and offline address book synchronization in Microsoft Outlook 2000.

Local Security Authority In Microsoft Windows 2000, a protected subsystem that authenticates and logs users on to the local system. The Local Security Authority also issues security identifiers (SIDs) for local user accounts. The enterprise counterpart of the Local Security Authority is the domain security authority, which generates SIDs for security principals in a Windows 2000 domain.

localhost A placeholder for the local computer on which a program is running, which is associated with reserved Internet Protocol (IP) address 127.0.0.1 (also known as the loopback IP address).

Log Manager A component of the Cluster service that maintains the recovery log, which is stored on the quorum resource. See also Cluster service.

Lotus cc:Mail Directory Propagation A mechanism to propagate recipient information across a Lotus cc:Mail environment. See also Automatic Directory Exchange (ADE).

Lotus cc:Mail forwarding history Forwarding information generated by Lotus cc:Mail that can be encapsulated into a FORWARD.TXT file when converting Lotus cc:Mail messages to Exchange format using the Connector for Lotus cc:Mail.

Lotus cc:Mail Import/Export programs Utilities used by the Connector for Lotus cc:Mail to exchange e-mail messages and perform directory synchronization with Lotus cc:Mail.

Lotus Notes Client API An API exposed by the Lotus Notes client and used by the Connector for Lotus Notes for the purposes of message transfer and directory synchronization between Lotus Domino/Notes and Microsoft Exchange 2000 Server.

Lotus Notes Mail Router An active process in a Lotus Domino/Notes environment that routes messages placed into the MAIL.BOX database by the Connector for Lotus Notes to their final destinations.

LSA See link state algorithm (LSA).

LST See link state table (LST).

M

MADCAP See Multicast Address Dynamic Client Allocation Protocol (MADCAP).

mail exchanger A Simple Mail Transfer Protocol (SMTP) host in a Domain Name System (DNS) domain that is registered using an MX record. See also MX record.

mailbox A repository of private folders that is associated with a Microsoft Windows 2000 user account and maintained in a mailbox store on an Exchange 2000 server. The mailbox contains, among other folders, the user's Inbox, which is the delivery location for incoming messages addressed to the user.

mailbox identifier A globally unique identifier (GUID) that associates a user account with its mailbox. This identifier is also called a mailbox GUID. See also globally unique identifier (GUID).

Mailbox Reconnect Tool (MBCONN) A utility that allows an administrator to generate an .ldf file based on information from restored mailbox stores, which can be used to create user accounts in Active Directory using LDIF Directory Exchange Tool (LDIFDE). As soon as user accounts exist, MBCONN can be used to reconnect the mailboxes in a bulk operation. See also LDIF Directory Exchange Tool (LDIFDE).

mailbox store A set of Extensible Storage Engine (ESE) database files that are managed as a unit in Microsoft Exchange 2000 Server to maintain mailboxes of Microsoft Windows 2000 user accounts. A single Exchange 2000 server can have up to 20 separate mailbox stores. See also Extensible Storage Engine (ESE), storage group.

mailbox store policy A system policy configured in Exchange System Manager that applies configuration settings to one or many mailbox stores in the administrative group. See also public store policy, server policy, system policy.

mailbox-enabled An Active Directory object that is associated with a mailbox in Microsoft Exchange 2000 Server. In Active Directory, only user accounts can be mailbox-enabled. Mailbox-enabled user accounts can send and receive e-mail messages. See also mailbox identifier, mail-enabled.

mail-enabled An Active Directory object that has been assigned e-mail addresses and can be selected as a recipient object from the server-based address lists. A mail-enabled recipient object does not have an associated mailbox in Microsoft Exchange 2000 Server. See also mailbox-enabled.

mail-enabled contact A mail-enabled object in Active Directory that points to a user outside the local Active Directory forest. See also mailbox-enabled, mail-enabled.

mail-enabled user account A mail-enabled object in Active Directory that refers to a user in the local Active Directory forest with a mailbox in a foreign messaging system. See also mailbox-enabled, mail-enabled.

MAPI See Messaging Application Programming Interface (MAPI).

MAPI-based hierarchy The default public folder hierarchy that is available to all messaging clients supported by Microsoft Exchange 2000 Server. The MAPI-based hierarchy is what the users see when they open the All Public Folders tree in Microsoft Outlook 2000. See also alternate hierarchy, public folder hierarchy.

MAPI-based messaging clients A messaging client, such as Microsoft Outlook 2000, that uses the Messaging Application Programming Interface (MAPI) subsystem to communicate with an underlying communication system, such as Microsoft Exchange 2000 Server, by means of a MAPI system provider. See also Messaging Application Programming Interface (MAPI).

MAPI-based profile Settings that provide Microsoft Outlook 2000 and other MAPI-based applications with information about the configuration of the Messaging Application Programming Interface (MAPI) subsystem to access a messaging system, such as an Exchange 2000 server.

MBCONN See Mailbox Reconnect Tool (MBCONN).

MCU See multipoint control unit (MCU).

MDB An acronym for message database, which stands for an instance of a mailbox or public store database implemented in Microsoft Exchange 2000 Server. See also mailbox store, public store.

Message Interchange Format (MIF) A file format used by the Connector for Lotus cc:Mail to read and write scratch files during the transfer of e-mail messages and directory information to and from a Lotus cc:Mail post office using the Lotus cc:Mail Import/Export programs. See also Lotus cc:Mail Import/Export programs.

message queue A temporary repository for inbound or outbound e-mail messages that require routing, format conversion, or other processing through an active server component, such as the routing engine, Message Transfer Agent (MTA), or a connector to a foreign messaging system.

message sealing The process of encrypting a message using public key technology to prevent the disclosure of its information to nonauthorized recipients. See also message signing.

message signing The process of adding a digital signature to an e-mail message, which allows recipients to verify the identity of the originator and the integrity of the message. See also digital signature.

message tracking The process of gathering information about message transfer that occurs either on a single Exchange 2000 server or between servers in an organization. Microsoft Exchange 2000 Server writes message tracking information into log files, which can be analyzed using a text editor or the Message Tracking Center. See also Message Tracking Center.

Message Tracking Center A management utility that allows an administrator to analyze message tracking logs to examine the path that a message has taken through the entire organization, including its exit points, such as a recipient's mailbox or a connector to a foreign messaging system. See also message tracking.

Message Transfer Agent (MTA) A component of Microsoft Exchange 2000 Server that is responsible for messages transfer over X.400 connectors. The MTA is also responsible for message routing to and from connectors to foreign messaging systems.

Messaging Application Programming Interface (MAPI) A standard interface and a Windows subsystem that messaging components can use to communicate with one another. Application programmers can use MAPI to create powerful messaging and workgroup applications. System programmers can create system providers to extend the MAPI subsystem to allow MAPI-based client applications to interact with their messaging platform. Microsoft Outlook 2000 is an example of a MAPI-based client, which uses a MAPI transport service to communicate with Microsoft Exchange 2000 Server.

metabase See IIS metabase.

Metabase Editor (MetaEdit) A utility for browsing and modifying configuration settings in the IIS metabase. See also IIS metabase.

metabase update service A component of the System Attendant service in Microsoft Exchange 2000 Server that reads configuration data from Active Directory to transfer it into the local IIS metabase. The data transfer is one way.

Microsoft Access Workflow Designer for SQL Server 7.0 A utility for database developers to create and enforce business rules for Microsoft Access 2000 team projects based on SQL Server databases.

Microsoft Chat 2.5 A client program with Internet Relay Chat (IRC) and Internet Relay Chat Extension (IRCX) command support that allows users to participate in chat discussions. See also Internet Relay Chat (IRC), Internet Relay Chat Extension (IRCX).

Microsoft Directory Synchronization Services (MSDSS) A solution to synchronize Active Directory accounts with accounts in Novell Directory Services (NDS) or Bindery, including password information. See also Bindery, Novell Directory Services (NDS).

Microsoft Exchange Event Service A component of Exchange Server 5.5 that supports customized workflow applications through public folder scripts and asynchronous events. Exchange 2000 Server supports this component for backward compatibility. See also asynchronous event.

Microsoft Exchange Mailbox Merge Wizard (EXMERGE) An administrative utility in Exchange 2000 Server that supports the transfer of mailbox contents from a recovery machine to a production server while both systems are online. EXMERGE may also be used as a backup agent to save messages and other items at the mailbox level.

Microsoft Exchange Multimedia Control An ActiveX control that allows users to record voice and video data directly in an e-mail message and send it just as any other message.

Microsoft Mail Connector A component in Exchange 2000 Server that provides connectivity to Microsoft Mail for PC Networks (MS Mail).

Microsoft Mail for PC Networks (MS Mail) A shared-file messaging system from Microsoft.

Microsoft Management Console (MMC) A Windows-based host application that represents a framework for Microsoft Windows 2000 management tools. MMC is part of the Microsoft Platform Software Development Kit (SDK).

Microsoft Mobile Explorer (MME) A modular wireless application platform designed to offer a wide choice of communication services on Internet-enabled mobile phones.

Microsoft MSN Messenger The preferred client for Instant Messaging in Exchange 2000 Server.

Microsoft NetMeeting A conferencing solution from Microsoft that supports the International Telecommunications Union (ITU) standards T.120 and H.323 for multipoint data conferencing and audio and video conferencing.

Microsoft Outlook Express A messaging and collaboration client from Microsoft that supports open Internet standards such as POP3, SMTP, LDAP, MIME, HTML, HTTP, and NNTP. Outlook Express can be used to access resources on an Exchange 2000 server.

Microsoft Platform Software Development Kit (SDK) A resource for software developers that want to develop Windows-based applications and services. The SDK includes header files, import libraries, and code samples, as well as detailed documentation about the technologies supported by Microsoft Windows 2000 and previously released platforms. The Exchange Development Kit (EDK) is part of the Platform SDK. See also Exchange Development Kit (EDK).

Microsoft Visual InterDev A development tool from Microsoft for building dynamic Web applications, such as Active Server Pages (ASP). See also Active Server Page (ASP).

Microsoft Workflow Designer for Exchange 2000 Server A utility for database developers to map out workflow processes based on the Microsoft Web Storage System and build a first skeleton of the workflow business solution. The workflow designer provides a convenient environment to create and register action tables and shared scripts. See also Web Storage System.

MIF See Message Interchange Format (MIF).

migration The process of transporting existing applications, user accounts, and data to different computer systems.

MIME See Multipurpose Internet Mail Extensions (MIME).

mixed-mode organization An Exchange 2000 Server organization that operates in mixed mode for backward compatibility with earlier versions of Microsoft Exchange Server. See also native-mode organization.

MMC See Microsoft Management Console (MMC).

moderated public folder A public folder where all postings are forwarded to a designated folder moderator to facilitate discussions in newsgroups or public Internet forums. The moderator must review the items individually and then grant approval by moving them back into the moderated folder.

move-mailbox upgrade See leapfrog upgrade.

MS Mail See Microsoft Mail for PC Networks (MS Mail).

MS Mail Connector Interchange A component of the MS Mail Connector implemented as a separate Microsoft Windows 2000 service that communicates with the Message Transfer Agent (MTA) to receive messages in Exchange format, converts them into MS Mail format, and places them in the Connector postoffice. The MS Mail Connector Interchange also obtains messages in MS Mail format from the Connector postoffice, converts them into Exchange format, and delivers them to the MTA. See also Connector postoffice.

MS Mail Connector MTA Service A Windows 2000 service that transfers messages in MS Mail format between the Connector postoffice and native MS Mail postoffices. See also Connector postoffice.

MS Mail Directory Synchronization events The events that form a complete Dirsync cycle; T1, T2, and T3. At T1, requestor postoffices generate update messages addressed to the Dirsync server. At T2, the Dirsync server incorporates received updates into a global master list and generates a global update message for all requestor postoffices that sent an update. At T3, the requestor postoffices incorporate the global address information into their postoffice address lists.

MS Mail Dirsync database A file called XDIR.EDB that resides in the \Program Files\Exchsrvr\Dxadata directory by default, which is used by the Directory Synchronization agent (DXA) to keep track of address updates received and sent from and to MS Mail postoffices. See also Directory Synchronization agent (DXA).

MS Mail external See MS Mail MTA.

MS Mail gateways Messaging components implemented as MS-DOS programs that provide MS Mail connectivity to foreign messaging systems, such as a Simple Mail Transfer Protocol (SMTP)-based or X.400-based system.

MS Mail MTA An MS-DOS-based messaging process that transfers messages between MS Mail postoffices.

MS Mail Multitasking MTA A Microsoft Windows NT-based messaging process that transfers messages between MS Mail postoffices.

MSDSS See Microsoft Directory Synchronization Services (MSDSS).

MTA See Message Transfer Agent (MTA).

MTS-IN The name of an inbound message queue maintained in the Information Store for an Exchange Development Kit (EDK)-based connector to a foreign messaging system. See also Exchange Development Kit (EDK), message queue.

MTS-OUT The name of an outbound message queue maintained in the Information Store for an Exchange Development Kit (EDK)-based connector to a foreign messaging system. See also Exchange Development Kit (EDK), message queue.

multicast See IP multicast.

Multicast Address Dynamic Client Allocation Protocol (MADCAP) An extension to the Dynamic Host Configuration Protocol (DHCP) that can be used to dynamically assign and configure Internet Protocol (IP) multicast addresses to support audio and video conferencing. See also audio and video conferencing, Dynamic Host Configuration Protocol (DHCP), IP multicast.

multihomed system A host with multiple network interface cards (NICs) attached to separate physical network segments. See also network interface card (NIC).

multimaster clustering A synonym for active/active clustering.

multimedia messaging The recording, transfer, and playback of audio and video data in e-mail messages. See also Microsoft Exchange Multimedia Control.

multipoint control unit (MCU) Data conferencing software that interconnects conference participants and distributes conference data based on the T.120 standard. Microsoft Exchange 2000 Conferencing Server provides a server-based MCU that supports client/server-based data conferencing with central management of online conferences.

Multipurpose Internet Mail Extensions (MIME) A standard format for Internet message bodies and attachments that enables the transfer of e-mail messages between different computer systems. MIME is defined in Request for Comments (RFC) 1521.

MX record An entry in a Domain Name System (DNS) database to identify mail exchanger systems (that is, SMTP hosts) for a DNS domain.

N

name and address book A database maintained by a Lotus Domino/Notes server that holds user and recipient information. See also Domino directory.

Name Service Provider Interface (NSPI) An interface used by Messaging Application Programming Interface (MAPI)-based clients to access directory information.

namespace A logical grouping of resources or items with the ability to resolve resource names to the actual objects they represent. Within any given namespace, resource names must be unique.

naming context (NC) A contiguous subtree in Active Directory that can be replicated as a unit to other domain controllers. Another term for naming context is directory partition. See also directory partition.

NAT See network address translation (NAT).

native-mode organization An Exchange 2000 Server organization that consists of only Exchange 2000 servers and provides the most flexible administrative and routing capabilities. Native-mode organizations do not support earlier versions of Exchange Server. See also mixed-mode organization.

NC See naming context (NC).

NDR See nondelivery report (NDR).

NDS See Novell Directory Services (NDS).

nesting The process of adding a group to another group with the primary purpose of reducing the replication overhead involved when group membership changes. Nested groups are only supported in native-mode Windows 2000 domains.

NetBEUI See NetBIOS Enhanced User Interface.

NetBIOS See Network Basic Input/Output System (NetBIOS).

NetBIOS Enhanced User Interface (NetBEUI) The Microsoft implementation of the NetBIOS programming interface that can be used in local area networks (LANs) that do not require the services of a network router.

NetBIOS over TCP/IP (NetBT) The Microsoft implementation of the NetBIOS programming interface over TCP/IP, for instance, to support NetBIOS name resolution in a TCP/IP-based network.

NetWare Core Protocol (NCP) The communication protocol between NetWare client software and a NetWare server on a Novell NetWare network.

NetWare Loadable Module (NLM) A server-based application that can be dynamically loaded and unloaded on a Novell NetWare server version 4.x and later.

network address translation (NAT) A feature that allows an administrator to connect a network through a single interface device to the Internet and provide Internet Protocol (IP) address translation between the public and private IP network. With NAT, for example, a small office network can connect to the Internet with a single IP address.

Network Basic Input/Output System (NetBIOS) An application programming interface (API) that can be used to access resources across a network. NetBIOS provides a uniform set of commands to establish sessions between network nodes and to transmit data.

network interface card (NIC) A device used to connect a computer to a local area network (LAN); also known as a network adapter or network card. See also local area network (LAN).

network load balancing A clustering feature of Microsoft Windows 2000 Advanced Server that can enhance the availability and scalability of Internet Information Services (IIS) platforms, such as IIS Web servers. Network load balancing supports up 32 hosts per cluster.

Network News Transfer Protocol (NNTP) A protocol used to distribute newsgroup articles to NNTP hosts and to newsreaders on the Usenet and Internet. NNTP is defined in Request for Comments (RFC) 977.

newsfeed control message A specific system message used by newsfeeds on the Usenet to create or delete newsgroups on a remote host.

newsgroup A discussion forum on the Usenet that typically focuses on a particular subject. Users can use newsreader software to participate in newsgroup discussions by contributing new postings or replies in the form of articles, which are replicated through the Usenet based on Network News Transfer Protocol (NNTP). Microsoft Exchange 2000 Server supports newsgroups implemented in public folders. See also Network News Transfer Protocol (NNTP).

NLM See NetWare Loadable Module (NLM).

NNTP See Network News Transfer Protocol (NNTP).

node In hierarchical structures, a location on the tree that can have links to one or more child objects. In computer networks, a device that is connected to the network to communicate with other systems. In the context of a server cluster, a server that is a member of a cluster.

Node Manager A process that runs on every node in a cluster to manage cluster membership and monitor the state of other nodes in the cluster. See also cluster.

nondelivery report (NDR) A notice that a message was not delivered to the intended recipient. An NDR typically contains the reason for the delivery problems, such as recipient not found.

nonrepudiation A basic feature of computer security that provides assurance that a participant in a communication cannot falsify another party's identity and that the communication partners cannot deny that part of a communication occurred.

Novell Directory Services (NDS) A directory service that runs on NetWare servers version 4 and later, which enables the centralized management of NetWare resources independent of their location on the network. NDS is a directory service comparable to Active Directory. See also Active Directory directory service.

Novell NetWare Client for Windows 2000 A software component from Novell for Microsoft Windows 2000 that can communicate with a Novell NetWare server via NetWare Core Protocol (NCP) in an Internetwork Packet Exchange (IPX)-based or TCP/IP-based environment. See also NetWare Core Protocol (NCP).

NSLookup A utility that allows a user to test the Domain Name System (DNS) name resolution. NSLookup also supports reverse DNS lookups and can find a host name from an Internet Protocol (IP) address. See also DNS lookup, Domain Name System (DNS).

NSPI See Name Service Provider Interface (NSPI).

NT File System (NTFS) A file system for storing and retrieving data in files on a hard disk that was first introduced with Microsoft Windows NT version 3.1. In Windows 2000, NTFS supports advanced file system services, such as the Encrypting File System (EFS). See also Encrypting File System (EFS).

NT Virtual DOS Machine (NTVDM) A special Win32-based environment that translates MS-DOS operating system calls into calls used by the Win32 subsystem. For example, the MS-DOS-based Import/Export programs of Lotus cc:Mail are executed in NTVDMs. See also Lotus cc:Mail Import/Export programs.

NTFS See NT File System (NTFS).

NTVDM See NT Virtual DOS Machine (NTVDM).

NWLink IPX/SPX Compatible Transport (NWLink) The implementation of the Internetwork Packet Exchange/Sequenced Packet Exchange (IPX/SPX) protocol in Microsoft Windows operating systems, which supports communication with NetWare applications over IPX/SPX sockets.

O

object class A definition of supported interfaces and methods that application programs can use to interact with a programmable Component Object Model (COM) object. An object class is essentially a template from which an object of that class can be created.

object model A representation or map of an application's functionality in terms of programmable objects and their hierarchical relationships. For example, Microsoft Outlook provides an object model that allows a developer to create customized Outlook solutions that use the various Outlook objects, including folder and message items and their associated hierarchical dependencies (for instance, a message resides in a folder, but not vice versa).

Offline Address Book A server-based address list that is generated on an Exchange 2000 server and downloaded to a Messaging Application Programming Interface (MAPI)-based messaging client, such as Microsoft Outlook 2000. The Exchange transport service maintains the Offline Address Book in .oab files locally on the client computer.

offline backup A file-based full backup of Exchange database files when all services of Microsoft Exchange 2000 Server are stopped. See also online backup.

offline folder store A local message repository that is maintained by the Exchange transport service and automatically synchronized with the information stored on the Exchange 2000 server. Offline folder stores are implemented in .ost files that can contain messages, calendar, and other synchronized information. Users can work with their synchronized folders in the .ost file when not connected to the server. See also local replication.

offline folders Synchronized copies of server-based mailbox and public folders that are stored in an offline folder store locally on a client computer. See also offline folder store.

OLE DB A collection of Component Object Model (COM) interfaces designed to provide access to relational and nonrelational information sources. See also OLE DB provider.

OLE DB provider A software component that implements OLE DB interfaces and can be used to access an information source through the OLE DB subsystem. See also Exchange OLE DB provider (ExOLEDB).

OLE Messaging A simple object library (OLEMSG.DLL) provided with Microsoft Exchange Server 4.0 to support the development of interactive Web pages that access messaging-related information. OLE Messaging was replaced by Active Messaging, which in turn was superceded by Collaboration Data Objects (CDO). See also Active Messaging, Collaboration Data Objects (CDO).

online backup A backup of Exchange databases when all services of Microsoft Exchange 2000 Server are running. Online backups use the Backup API of Exchange 2000 Server.

Open Shortest Path First (OSPF) A complex routing protocol used in routed computer networks that provides efficient control over the propagation of routing information that allows routers to identify the most efficient path across a network. OSPF is similar to the link state algorithm (LSA) in Microsoft Exchange 2000 Server. See also link state algorithm (LSA), link state information (LSI).

Open Systems Interconnection (OSI) A reference model for the transmission of data between nodes in a telecommunication network. The reference model defines seven functional layers with well-defined purposes that represent horizontal endpoints of the communication. An OSI-compliant protocol suite is X.400.

organizational forms library (OFL) A hidden system folder for public forms that are not associated with a particular public folder (send forms).

organizational unit (OU) A container object in Active Directory that is used to organize users, groups, computers, and other OUs. An OU is the smallest unit for which administrative permissions can be delegated.

OSI See Open Systems Interconnection (OSI).

OSPF See Open Shortest Path First (OSPF).

Outlook form An electronic form that is associated with a message class and launched by Microsoft Outlook automatically when an item of that class is opened. Outlook forms are not compiled, but interpreted at runtime. See also Outlook Forms Designer.

Outlook forms cache A folder on the local hard disk of the computer running Microsoft Outlook, which is used to download and store electronic forms prior to their execution. Outlook uses the forms cache to increase performance when opening forms. The forms cache eliminates the need to download a form every time an associated item is opened. See also Outlook form.

Outlook Forms Designer The development environment available in Microsoft Outlook to design electronic forms based on Outlook standard form types. The Outlook Forms Designer provides the functionality to register custom Outlook forms in an available forms library. See also forms library.

Outlook View Control An ActiveX control that can be hosted inside a Web page to gain access to programmable objects exposed by Microsoft Outlook 2000. The Outlook View Control is typically used in Digital Dashboards to provide convenient access to mailbox and public folders. See also Digital Dashboards.

Outlook Web Access (OWA) A Web-based messaging and collaboration client used to access message, calendar, and contacts folders using a Web browser. Microsoft Exchange Server 5.5 provides an OWA client that communicates with the Information Store service based on Messaging Application Programming Interface (MAPI). OWA for Microsoft Exchange 2000 Server, in contrast, uses the features of the Web Storage System. See also Web Storage System.

P

parent object A container or node that holds other objects and is in relation to these child objects. For example, the inbox folder of a mailbox is a parent object for received messages. An object can be both a parent and a child object; for instance, a subfolder in a public folder.

Patch 2 for API NLM An updated version of the Novell GroupWise API Gateway that is required for proper operation of the Connector for Novell GroupWise. See also API Gateway.

PDC See primary domain controller (PDC)

peer-to-peer conferencing A data conferencing model in which a client-based multipoint control unit (MCU) must send a separate copy of the data to each conference participant over a separate connection. See also client/server conferencing.

Performance snap-in A monitoring tool that is available in Microsoft Windows 2000 Server to monitor the performance of local and remote computers Windows NT or Windows 2000 systems anywhere on a computer network and to log results to a file for later analysis of the performance history.

perimeter network See demilitarized zone (DMZ).

permissions inheritance The automatic copying of security information from a parent to a newly created child object. See also inheritance.

personal folder store (PST) A folder store that is maintained in a .pst file locally on the client computer by the Messaging Application Programming Interface (MAPI)-based personal folder store provider. The personal folder store may also be located on a file server. It can be used to download messages and other items from a server-based mailbox or public folders.

personal folders A private repository for e-mail messages in a personal folder store (PST). See also personal folder store (PST), private folders.

personal forms library (PFL) A location for personal forms that is associated with a particular user's mailbox and not publicly available to other users.

PKCS See Public Key Cryptography Standard (PKCS).

PKI See public-key infrastructure (PKI).

POA See post office agent (POA).

Point-to-Point Tunneling Protocol (PPTP) An open industry standard to establish a virtual private network (VPN) over the Internet. PPTP is often used to replace long-distance dial-up connections with connections to a local Internet service provider (ISP) to reduce costs. See also Internet service provider (ISP), virtual private network (VPN).

polling The process of checking whether a resource exists and is available or operating.

POP3 See Post Office Protocol version 3 (POP3).

port An endpoint of a Transmission Control Protocol (TCP)- or User Datagram Protocol (UDP)-based connection by which a client can communicate with particular services. A property of TCP and UDP connections that identifies a service on a particular system. TCP and UDP ports range from 0 to 65536. Ports with the numbers 0 to 1024 are well-known ports defined for standard Internet protocols and services, for instance the default port number for Simple Mail Transfer Protocol (SMTP) is 25. See also Sockets.

postmaster A special e-mail account used as the originator of system messages, such as nondelivery reports (NDRs). The postmaster account may also receive status messages from active server components, such as messaging connectors. See also nondelivery report (NDR).

post office A central repository used in shared-file messaging systems to send and deliver e-mail messages. Clients typically poll the post office at periodic intervals to check for new messages. See also polling.

post office agent (POA) An active process in a Novell GroupWise environment that controls and maintains a post office. See also post office.

Post Office Protocol version 3 (POP3) A protocol that allows a client application to access a mail repository (Inbox) on a server. Typically, a POP3 client downloads all messages to the local workstation and uses Simple Mail Transfer Protocol (SMTP) to send e-mail messages. POP3 is defined in Request for Comments (RFC 1725). See also Simple Mail Transfer Protocol (SMTP).

PPTP See Point-to-Point Tunneling Protocol (PPTP).

presence information Information in an Instant Messaging environment that indicates a person's online status. See also Instant Messaging (IM).

preview pane A folder view feature in Microsoft Outlook 2000 that divides the Outlook window into two separate panes listing the items of a folder in the upper pane and the contents of the currently selected item in the lower pane without actually opening the item. See also folder views.

primary domain controller (PDC) In a Microsoft Windows NT Server domain, the computer that maintains the only writeable copy of the directory database for the domain. The PDC replicates this database to backup domain controlllers (BDCs), authenticates domain logons, and tracks changes made to computer and user accounts. A Windows NT Server domain can only have one PDC. See also backup domain controller (BDC).

private folders A private repository in a mailbox that is located on a computer running Microsoft Exchange 2000 Server. Private folders may be replicated to an offline folder store. See also offline folder store, personal folders.

private key A secret key that is available only to the user to whom it belongs. The private key is used in conjunction with a public key, which together form a cryptographic key pair. In Microsoft Exchange 2000 Server, private keys are used to digitally sign messages and to decrypt sealed messages. See also message sealing, message signing, public key.

Professional Office System (PROFS) IBM office automation software for mainframes that runs under the Virtual Machine (VM) operating system. PROFS provides e-mail messaging, calendaring, and workgroup capabilities.

PROFS See Professional Office System (PROFS).

protocol event sink Executable code that is registered with the Simple Mail Transfer Protocol (SMTP) or Network News Transfer Protocol (NNTP) service to extend the service's capabilities though custom verbs or commands. See also event sink, transport event sink.

protocol stack The implementation of a specific protocol family into a network driver that can be installed on a computer to serve the needs of network communication.

proxy address generation The process of generating an e-mail address for a foreign messaging system based on Exchange recipient information according to an address generation rule. The Recipient Update Service uses a separate proxy address generator to generate a proxy address of a specific type, for instance an MSMAIL proxy address. See also proxy address generator, Recipient Update Service.

proxy address generator A dynamic-link library (DLL) that generates an e-mail address for a foreign messaging system based on information supplied by the Recipient Update Service. See also Recipient Update Service.

proxy e-mail address An e-mail address for Exchange users that allows non-Exchange users to send them messages. Proxy addresses are used to represent Exchange user as recipients on a foreign system when sending mail to a non-Exchange recipient.

proxy server A multihomed system that is configured to act on behalf of assigned clients by translating client requests and passing them to another network segment. Proxy servers are often used as firewalls between a private network and the Internet. A proxy server may also cache Web pages for quicker retrieval by clients. See also multihomed system.

PTR record (PTR) A record in a Domain Name System (DNS) database that maps an Internet Protocol (IP) address to a host name in the In-addr.arpa domain. PTR records are used to perform reverse DNS lookups. See also DNS lookup.

public folder hierarchy A logical arrangement of public folder objects maintained in a tree, where upper nodes may contain zero, one, or many child nodes. Multiple hierarchies can be defined in Microsoft Exchange 2000 Server, but a particular hierarchy can only be associated with a single public store on a server. Each hierarchy is replicated as a unit to all servers that contain a public store associated with it. See also alternate hierarchy, MAPI-based hierarchy.

public folder replication The process of keeping public folder replicas on different Exchange 2000 servers synchronized.

public folder store See public store.

public key A secret key that is available to all users in an organization, used to verify digital signatures and seal (encrypt) messages for decryption by the owner of the associated private key. See also message sealing, message signing, private key.

Public Key Cryptography Standard (PKCS) Standard developed and maintained by RSA Data Security, Inc for defining methods of cryptography in which a public key and a private key are used. Public key cryptography is also called asymmetric cryptography because the encrypting key is different than the decrypting key. See also private key, public key.

public-key infrastructure (PKI) A framework of services, technology, protocols, and standards to deploy and manage a security system based on public key technology. A PKI consists of certificate authorities (CAs) and other registration authorities that issue and manage digital certificates. In Microsoft Exchange 2000 Server, PKIs include Certificate Services and a Key Management server. See also Key Management Service (KMS).

public store A set of Extensible Storage Engine (ESE) database files (Rich Text .edb database plus streaming .stm database) that are managed as a unit in Microsoft Exchange 2000 Server to maintain information in public folders. See also mailbox store.

public store policy A system policy configured in Exchange System Manager that applies configuration settings to one or many public stores in the administrative group. See also mailbox store policy, server policy, system policy.

pull feed A newsfeed that initiates connections to a provider host to obtain information and place it in local newsgroups. See also push feed.

push feed A newsfeed that initiates connections to a subscriber host to place information in the newsgroups of the remote host. Push feeds are typically used for very large newsfeeds. See also pull feed.

Q

quorum algorithm A voting mechanism to arbitrate the ownership of the quorum resource in case the current owner fails. The quorum algorithm guarantees that recovery data is maintained consistently between all cluster members. See also quorum resource.

quorum disk A physical disk that acts as the quorum resource and holds the cluster log. See also quorum resource.

quorum resource A special resource in a server cluster that provides a physical storage media for the cluster log. Only a single node in the cluster can gain physical control of the cluster resource at a given time and there is only one quorum resource per cluster by default.

R

RAID See redundant array of inexpensive disks (also recently referred to as redundant array of independent disks) (RAID).

RCONSOLE A Novell NetWare utility that provides a remote view of the NetWare server's system console to perform management tasks remotely, such as loading an NetWare Loadable Module (NLM).

read receipt (RR) An e-mail confirmation that a recipient has displayed a message. Read receipts can be requested for individual messages or for all messages depending on the client configuration. See also delivery confirmation report.

real-time collaboration A set of services that give users the ability to participate in live group discussions, share files and applications, and join online meetings. In Microsoft Exchange 2000 Server, real-time collaboration is supported through online conferencing, Instant Messaging (IM), and Chat.

Real-Time Protocol (RTP) A protocol designed to carry real-time data over a computer network.

Recipient container In Microsoft Exchange Server 5.5, a container in the Exchange directory that holds recipient objects. Recipient containers can be used to structure server-based address lists, but is not possible to move a mailbox from one Recipient container to another after the mailbox has been created. In Exchange 2000 Server, an organizational unit (OU) that holds mailbox- and mail-enabled accounts, which is not used as a structured address list. It is possible to move accounts and contacts between OUs using Active Directory Users and Computers. See also recipient objects.

recipient object An object in a directory that provides information, such as e-mail addresses, about a destination that can receive e-mail messages. In Active Directory, recipient objects are mailbox-enabled users accounts or mail-enabled user accounts or contacts. Recipient objects are replicated to the Global Catalog to make them available in server-based address books. See also Global Catalog.

recipient policy A group of settings that are applied to mailbox- and mail-enabled recipient objects to generate e-mail addresses. See also recipient object.

Recipient Update Service A process in Microsoft Exchange 2000 Server that applies settings defined in recipient policies to recipient objects in Active Directory. The primary task is e-mail address generation.

reconnecting a mailbox The process of reassigning a deleted or otherwise disconnected mailbox to a user account in Active Directory. By default, Exchange Exchange 2000 Server holds disconnected mailboxes in the information store for 30 days to enable administrators to reconnect them to user accounts without the need for a backup.

recovery server A separate computer system that is not part of a production environment to be used to restore information from backup media, such as for disaster recovery purposes.

redundant array of independent disks (RAID) A mechanism of configuring multiple disks as a single logical drive for redundancy, improved performance, and increased resilience.

Registry A system database that stores information about the system, user environments, applications, and hardware devices. An administrator can edit the Registry using standard administrative utilities or a Registry Editor.

relative distinguished name (RDN) That part of an object's distinguished name that refers to the actual object in relation to the container in which the object resides. It is possible for multiple objects in different containers to have the same RDN, but all objects have unique distinguished names (DNs).

remote procedure call (RPC) A client/server protocol for distributed computer systems, which transfers function calls and data between client and server processes.

Rendezvous Protocol (RVP) The protocol used by the Microsoft MSN Messenger client to interact with an Instant Messaging server. See also Instant Messaging Presence Protocol.

Request for Comments (RFC) An industry standard issued by the Internet Engineering Task Force (IETF) that specifies the details for protocols used on the Internet. See also Internet Engineering Task Force (IETF).

requestor postoffice A Microsoft Mail for PC Networks postoffice that is configured as a Dirsync requestor. See also Dirsync requestor.

Resolver Domain Name System (DNS) process that looks up DNS name information on behalf of TCP/IP-based processes that want to resolve DNS names into Internet Protocol (IP) addresses or vice versa.

Resource Manager A process in a cluster that communicates with the Cluster service to monitor the health of the cluster resources. See also Cluster service.

reverse DNS lookup A query in which an Internet Protocol (IP) address is resolved to a Domain Name System (DNS) name. See also DNS lookup.

RFC See Request for Comments (RFC).

Rich Text Format (RTF) A standard method of encoding formatted text and graphics in documents on MS-DOS, Windows, Windows 95, OS/2, and Apple Macintosh systems.

round-robin DNS A simple Domain Name System (DNS) mechanism to distribute TCP/IP connections over multiple network systems. Round-robin DNS is based on the principle of registering the same DNS domain name with multiple Internet Protocol (IP) addresses to rotate the IP address returned in query answers. See also DNS lookup.

Router for Novell GroupWise A component of the Connector for Novell GroupWise that transfers keyword-based text files to and from an API Gateway. See also API Gateway, keyword-based text file.

Routing and Remote Access Service (RRAS) A component that provides multiprotocol routing and remote access and services required to establish a virtual private network (VPN). Microsoft Exchange 2000 Server uses RRAS to communicate with remote systems over dial-up connections.

Routing Engine A service in Microsoft Exchange 2000 Server that makes message routing decisions based on link state information (LSI). See also link state information (LSI).

routing group A collection of Exchange 2000 servers that typically share a permanent, reliable, high-bandwidth network connection. In a routing group, all servers communicate directly with each other using Simple Mail Transfer Protocol (SMTP).

Routing Group Connector (RGC) A connector that can only be used to provide a message path between routing groups in the same organization. In native-mode organizations, an RGC transfers messages in transport-neutral encapsulation format (TNEF) based on Simple Mail Transfer Protocol (SMTP). In mixed-mode organizations, an RGC communicates via remote procedure call (RPC) when connecting to Microsoft Exchange Server 5.5. See also mixed-mode organization, native-mode organization.

routing group master (RGM) An Exchange 2000 server that centrally maintains the link state table (LST) for a routing group and propagates it to all other servers in the routing group. All other servers inform the RGM about any link state information (LSI) changes that they detect. See also link state algorithm (LSA), link state information (LSI).

roving user A user who works with multiple computers in different locations, whose profile is stored on a server and downloaded to the current workstation during the logon process to provide the same desktop and user settings on all machines.

RPC See remote procedure call (RPC).

RPC Endpoint Mapper A service that allows the remote procedure call (RPC) runtime environment to dynamically resolve and assign Transmission Control Protocol (TCP) ports to applications. See also port.

RTP See Real-Time Transport Protocol (RTP).

runtime license A special license for an ActiveX control that allows an application that contains the ActiveX controls to load and use it without errors. Runtime licenses are typically distributed with applications that contain ActiveX controls.

RVP See Rendezvous Protocol (RVP).

S

SACL See system access control list (SACL).

SAP See Service Advertising Protocol (SAP).

SASL See Simple Authentication and Security Layer (SASL).

Schedule+ Free/Busy Connector A component of the MS Mail Connector to synchronize free/busy information between MS Mail and Microsoft Exchange 2000 Server.

schema The metadata that governs the type of objects that can exist in a database and describes their mandatory and optional attributes. Active Directory supports an extensible schema that allows third parties to create their own object classes. Databases in Microsoft Exchange 2000 Server use a semistructured schema, which provides the required flexibility to support all kinds of information in mailboxes and public folders.

schema administrator A member of the Schema Admins group. See also Schema Admins.

Schema Admins A special Windows 2000 group that exists only in the root domain of an Active Directory forest. Members of this group are known as schema administrators. They are authorized to make schema changes in Active Directory.

schema definition file A system file that is used by the Connector for Lotus Notes and Connector for Novell GroupWise to determine the subset of directory attributes that must be synchronized between Active Directory and the foreign system. See also directory synchronization.

schema extension An update to the standard Active Directory schema to support additional functionality that is not covered by standard directory object classes and attributes. Microsoft Exchange 2000 Server applies several extensions to the Active Directory schema to implement Exchange-specific configuration objects and attributes.

scratch file An e-mail message written to a text file in the Connector Store of the Connector for Lotus cc:Mail. See also Connector for Lotus cc:Mail.

secret key An encryption key that is used for data encryption and decryption. In an electronic communication, the secret key is shared between the authorized communication partners. It is important to protect the secret key from unauthorized users, for instance by using a public key encryption method.

Secure Password Authentication (SPA) The process of authenticating messaging users using current logon credential information. SPA assumes that the mailbox alias is the same as the user's Windows 2000 account. Internet mail clients can use the Auth NTLM command to initiate an SPA. See also authentication.

Secure Sockets Layer (SSL) A communication standard developed by Netscape Communications that resides on top of TCP/IP and provides public key cryptography services to guarantee privacy over public networks. See also public key.

Secure/Multipurpose Internet Mail Extensions (S/MIME) An extension of Multipurpose Internet Mail Extensions (MIME) that supports message signing and sealing. See also message sealing, message signing.

security descriptor A data structure containing information to secure an object through access control and auditing settings defined for users, groups, and processes. A security descriptor may contain a discretionary access control list (DACL) for access permissions and a system access control list (SACL) for system auditing.

security identifier (SID) A unique name that identifies a security principal, such as an individual user, a group, or a computer. See also security principal.

security principal An account that has a security identifier (SID) and can be granted or denied access to objects in Active Directory. In contrast, a nonsecurity principal is an object represented in Active Directory that cannot access resources within the forest (for instance, a mail-enabled contact). See also access control.

semistructured database A database, such as Active Directory, with a schema that supports a flexible storage model to provide the ability to store and transport unstructured or semistructured data, such as word processing documents, presentation files, appointment and contact items, or e-mail messages.

SEO See Server Extension Objects (SEO).

Server Extension Objects (SEO) A management technology to register event sinks with the Simple Mail Transfer Protocol (SMTP) or Network News Transfer Protocol (NNTP) service, or Microsoft Web Storage System. See also event sink.

Server Message Block (SMB) A file-sharing protocol used by NetBIOS for file and printer sharing for communication between all Microsoft networking products. See also Network Basic Input/Output System (NetBIOS).

server policy A system policy configured in Exchange System Manager that applies configuration settings to one or many servers in the administrative group. See also mailbox store policy, public store policy, system policy.

service account A Windows 2000 user or computer account that is used to run system services. In Microsoft Exchange 2000 Server, services are configured to operate in the context of the local system account. In Exchange Server 5.5, a common user account must be used for all services on all servers in a site, which is therefore also known as site services account.

Service Advertising Protocol (SAP) A protocol used in NetWare environments to advertise server services and to perform name resolution. NetWare servers and all Internetwork Packet Exchange (IPX) routers must use SAP to periodically broadcast their services, server name, and the IPX internal network address.

Service Location Resource Records (SRV) A standard Domain Name System (DNS) resource record to specify the location of a host that provides a specific service over a specific protocol for a defined DNS domain. See also Domain Name System (DNS).

Service Provider Interface (SPI) An interface of the Messaging Application Programming Interface (MAPI) subsystem that independent software vendors and third-party developers can use to develop MAPI drivers for messaging systems, such as address book, transport, or message store providers.

ShivaRemote Software included with the Microsoft Exchange client for MS-DOS and Windows 3 or later for full remote connectivity over dial-up connections.

shortcut menu A dynamic menu that is displayed when a user right-clicks a visual element in the user interface to provide object-specific options and commands.

SID See security identifier (SID).

SIDHistory An attribute of a user account in Active Directory that is used to maintain former security identifiers (SIDs) so that the user can get access to resources that were made available to a former account. The SIDHistory is particularly important when migrating users from Microsoft Windows NT 4.0 or moving users between domains (because SIDs are domain specific). See also security identifier (SID).

Simple Authentication and Security Layer (SASL) A method for adding authentication support to connection-based protocols. Connecting client must issue the AUTH command to initiate the authentication process with the server. SASL is defined in Request for Comments (RFC) 2222. See also authentication.

Simple Mail Transfer Protocol (SMTP) A transport protocol for sending messages from one host to another on a TCP/IP network. SMTP is used on the Internet for e-mail messaging. Microsoft Exchange 2000 Server is based on a powerful SMTP-based routing and transport engine.

single-instance storage A feature to store a message sent to many recipients in a single instance on the server to preserve disk space.

site In Microsoft Windows 2000 Server, an element to organize the physical structure of an Active Directory environment. Sites are collections of Internet Protocol (IP) subnets with high-speed connectivity for direct Active Directory replication. In Exchange Server 5.5, a grouping of servers that communicate directly with each other using remote procedure calls (RPCs).

Site Consistency Checker A component of Site Replication Service (SRS) that creates configuration connection agreements for the Active Directory Connector (ADC) according to the topology of sites, administration groups, and Windows 2000 domains in a mixed-mode organization. An updated version of the Knowledge Consistency Checker of Exchange Server 5.5.

Site Replication Service (SRS) The implementation of the legacy Exchange directory service into Microsoft Exchange 2000 Server to provide an Exchange Server 5.5 interface for directory replication to earlier versions of Exchange Server. The SRS works in conjunction with the Active Directory Connector (ADC) and is primarily responsible for replicating configuration information. See also Active Directory Connector (ADC).

Small Computer System Interface (SCSI) A standard defined by the X3T9.2 committee of the American National Standards Institute (ANSI) to connect peripheral devices, such as hard disks and printers, and other equipment to a computer system.

smart host A system that is located somewhere in the network and can be reached using Simple Mail Transfer Protocol (SMTP) to forward outgoing messages to their destinations on behalf of the sending SMTP system.

SMTP See Simple Mail Transfer Protocol (SMTP).

SNA Distributed Systems (SNADS) A message transport protocol for System Network Architecture (SNA)-based systems that communicate in a peer-to-peer network.

snap-in A component of the MMC framework that is used to administer components and services under Microsoft Windows 2000. The Exchange System Manager is an example of a Microsoft Management Console (MMC) snap-in that is used to manage an Exchange 2000 Server organization. See also Microsoft Management Console (MMC).

Sockets An implementation of the UC Berkeley Sockets application programming interface (API) that applications use to create TCP/IP connections. A Socket is a combination of an Internet Protocol (IP) address and a port number used to establish a connection between computers in a communication network. See also port.

soft recovery The process of applying transaction log files to database files to recover from a failure, such as a power outage. Microsoft Exchange 2000 Server performs a soft recovery automatically when restarting the Information Store service.

SPA See Secure Password Authentication (SPA).

spoofing An insidious method of changing data in such a way that it appears to come from another (authorized) user.

SQL See structured query language (SQL).

SRS See Site Replication Service (SRS).

SRV Records See Service Location Resource Records (SRV).

SSL See Secure Sockets Layer (SSL).

storage group A collection of mailbox and public stores in Microsoft Exchange 2000 Server that share a common set of transaction log files. The stores in a storage group should be maintained as a unit. A single Exchange 2000 server can have up to four separate storage groups, which can hold each up to five mailbox and public stores. See also mailbox store, public store.

storage limits The maximum amount of data as defined by an administrator that can be stored in a mailbox, public folder, or storage group before Microsoft Exchange 2000 Server generates warning messages or prevents message sending or receiving.

store and forward mechanism A mechanism that allows a system to store information until a communication path to the receiver is available. E-mail systems, for instance, operate according to the store and forward mechanism in that a server receives and stores e-mail messages locally to deliver them to the recipient's home server or another intermediary system in the message path when a connection can be established.

streaming database A database of the Information Store service that supports streaming Multipurpose Internet Mail Extensions (MIME) content directly into a mailbox or public store without conversion. File names of the streaming database have an .stm extension, by default. See also Multipurpose Internet Mail Extensions (MIME).

structured query language (SQL) A database query and programming language for accessing data, and querying, updating, and managing relational database systems originally developed by IBM.

subnet A separate part of a computer network in which all nodes can communicate directly with each other. A logical grouping of network computers that use IP addresses from a single, contiguous block. A subnet typically connects computers in the same geographical location and the same network segment.

subnet mask A series of 4 bytes that determine which part of an Internet Protocol (IP) address identifies a node's network segment subnet (network ID) and which part refers to the node address.

synchronous event An event that is fired as a condition occurs, which provides event sinks with exclusive control of the item that triggered the event. The event source thread is blocked for the duration of the sink execution.

system access control list (SACL) That part of a security descriptor that controls how the Windows 2000 security subsystem audits attempts to access an object. See also security descriptor.

System Attendant (SA) A core service of Microsoft Exchange 2000 Server that performs regular maintenance tasks, such as the monitoring of server services and messaging connectors, starting the defragmentation routines of the Information Store, and forwarding directory lookups to a Global Catalog.

system policy A configuration object that can be applied to server objects, mailbox stores, or public stores, which defines common configuration parameters that are applied to all objects associated with the policy. See also mailbox store policy, public store policy, server policy.

T

T.120 A suite of communications and application protocols for real-time, multipoint data connections and online conferencing.

T.127 A protocol for file transfer based on the T.120 standard.

TCP port See port.

TCP/IP See Transmission Control Protocol/Internet Protocol (TCP/IP).

teleconference An online conference that enables more than two participants to communicate in real time. See also audio and video conferencing.

Telephony Application Programming Interface (TAPI) A Windows application programming interface (API) to integrate computer and telephone technologies for dial-up access, voice input/output, and other features.

Telnet Utility A terminal emulation program that allows a user to establish a host session to a server using one of several emulation types.

Terminal Services A set of Microsoft Windows 2000 Server services that allows a user to run client applications for data processing and storage directly on the server using a terminal, thin client, or terminal emulator. In a terminal server environment, the server performs all processing. The client sends keyboard and mouse input directly to the server and displays the results on the monitor.

timestamp Information attached to an object in one or more attributes to indicate the time an object was created, changed, or last accessed.

TLS See Transport Layer Security (TLS).

TNEF See transport-neutral encapsulation format (TNEF).

transaction log file A file that gives the Extensible Storage Engine (ESE) the ability to sequentially append new transactions from the memory cache to existing data in the file without the need for complex database operations. Transaction log files provide fault tolerance in case the content from the memory cache is lost due to a system failure and the data needs to be restored to the databases.

Transmission Control Protocol/Internet Protocol (TCP/IP) A suite of protocols that provide a reliable, routable communication infrastructure for computer systems with different hardware architectures and operating systems. TCP/IP can be used in local area network (LAN) and wide area network (WAN) environments.

transport event An event fired when a message arrives to the Simple Mail Transfer Protocol (SMTP) or Network News Transfer Protocol (NNTP) service. Transport events provide a means to intercept messages and news articles before they are placed in the Microsoft Web Storage System. See also event sink.

transport event sink Executable code that is registered with the Simple Mail Transfer Protocol (SMTP) or Network News Transfer Protocol (NNTP) service to process the contents of every message passing through these transports. See also event sink, protocol event sink.

Transport Layer Security (TLS) A communication layer similar to Secure Sockets Layer (SSL) that provides privacy, authentication, and data integrity by using a combination of public key and bulk encryption. See also Secure Sockets Layer (SSL).

transport-neutral encapsulation format (TNEF) The format of a binary message attachment that is used to package message properties not understood by intermediate messaging systems in the delivery path. In most cases, the binary attachment is named WINMAIL.DAT.

trusted root certification authority A root certificate authority that is trusted by the computer for all purposes defined in its security certificate.

U

UDP See User Datagram Protocol (UDP)

unattended setup The process of installing an application without direct user input using a setup initialization file with predefined settings.

UNC See Universal Naming Convention (UNC).

unicasting The process of sending data over a computer network to an address that identifies a specific, globally unique host. Unicast addresses are also known as media access control (MAC) addresses.

unified messaging The combination of messaging, fax, voice, and online conferencing technologies to integrate all forms of electronic communication into one infrastructure.

Uniform Resource Identifier (URI) An address string to point to an object of content on the Internet (typically a Web page, but also audio or video, images, or a program). The most common form of URI is the Uniform Resource Locator (URL). See also Uniform Resource Locator (URL).

Uniform Resource Locator (URL) An address in the format protocol://serveraddress/path that specifies the location and name of a resource on the Internet or an intranet. See also Uniform Resource Identifier (URI).

Uniform Resource Name (URN) A type of Uniform Resource Identifier (URI) that identifies a resource irrespective of its location. See also Uniform Resource Identifier (URI).

universal group A specific type of group in Active Directory that is available anywhere in the forest. Universal groups can contain other universal groups, global groups, and accounts from anywhere in the forest. Universal groups are only available in native mode. They are replicated to the Global Catalog.

Universal Naming Convention (UNC) A naming convention to identify computers in a network and their share points. The UNC format defines the server name preceded by two backslashes, followed by other fields that are separated by a single backslash, such as \\servername\sharename\path\filename.

UNIX A portable, multiuser, multitasking operating system written in the C programming language, originally developed at AT&T Bell Laboratories in 1969.

Unix-to-Unix encoding method (uuencode) A method of encoding and decoding files or e-mail attachments into 7-bit ASCII for the purpose of data transfer between systems in a network. See also American Standard Code for Information Interchange (ASCII).

Usenet A worldwide communication network of sites and servers that use Network News Transfer Protocol (NNTP) to replicate articles between newsgroup instances. See also Network News Transport Protocol (NNTP).

user connection agreement A connection agreement of the Active Directory Connector (ADC) established between Microsoft Exchange Server 5.5 and Active Directory to replicate recipient information between both systems. See also Active Directory Connector (ADC).

User Datagram Protocol (UDP) A protocol on top of Internet Protocol (IP) that offers a connectionless datagram service (that is, it does not guarantee delivery or provide packet sequencing). To transfer data over UDP, all information must fit into a single UDP packet. UDP offers improved efficiency over Transmission Control Protocol (TCP) for short messages.

user mode A mode of the Microsoft Management Console (MMC) that provides only a subset of features to the user that opened the console. See also author mode.

uuencode See Unix-to-Unix encoding method (uuencode).

V

VBScript See Visual Basic Scripting Edition (VBScript).

vCard An implementation of an electronic business card to exchange personal information such as address, name, e-mail address, and phone number with other users, regardless of their client programs.

virtual directory A shared Web folder accessible from within Internet Information Services (IIS) that maps to a folder on the file system. See also Internet Information Services (IIS).

virtual private network (VPN) A technology that leverages Internet Protocol (IP) connectivity and encryption technology to connect remote clients and remote offices across a public network, such as the Internet, in a manner that emulates the properties of point-to-point private links.

virtual server A collection of services provided to clients as an emulation of a physical server. See also virtual server instance (VSI).

virtual server instance (VSI) An instance of a virtual server that consists of a combination of Internet Protocol (IP) address and Transmission Control Protocol (TCP) port number, and individual configuration parameters for a specific protocol service, such as Simple Mail Transfer Protocol (SMTP).

Visual Basic Scripting Edition (VBScript) A subset of Visual Basic that enables developers to create script-based business applications, such as Active Server Pages (ASPs). VBScript can also be used to extend the functionality of Outlook forms or to provide solutions for Microsoft Windows Scripting Host.

VPN See virtual private network (VPN).

VSI See virtual server instance (VSI).

W

WAN See wide area network (WAN).

Web browser A client interface that enables a user to view Hypertext Markup Language (HTML) documents typically transferred to the user's computer via Hypertext Transfer Protocol (HTTP). A good example of a Web browser is Microsoft Internet Explorer 5.0.

Web Distributed Authoring and Versioning (WebDAV) An extension to the Hypertext Transfer Protocol (HTTP) 1.1 standard that allows remote authors to add, search, delete, or change files, directories, and documents and their properties through an HTTP connection.

Web forms library (WFL) A location for Web-based forms for Outlook Web Access (OWA).

Web Storage System A database architecture in Microsoft Exchange 2000 Server that provides access to mailbox and public folder resources through Hypertext Transfer Protocol (HTTP), Extensible Markup Language (XML), Web Distributed Authoring and Versioning (WebDAV), OLE DB, ActiveX Data Objects (ADO), and an installable file system driver.

Web Storage System event Notifications triggered by Exchange OLE DB to activate registered event sinks. Web Storage System events are a means to implement workflow and process-tracking logic for mailbox and public folders. See also event sink.

Web Storage System form A Hypertext Markup Language (HTML)-based form that is launched automatically when a user accesses an item in the Web Storage System via HTTP/WebDAV. A custom forms engine is used to render HTML forms.

Web Storage System Forms for Microsoft Exchange 2000 Server Software Development Kit (SDK) A technology for the Web Storage System to enable developers to build Hypertext Markup Language (HTML)-based forms in Microsoft FrontPage 2000 without the need for any programming. See also Web Storage System form.

Web Storage System forms registry A forms library in the Web Storage System that is used to register Web Storage System forms. See also Web Storage System forms.

Microsoft Web Storage System See Web Storage System.

WebDAV See Web Distributed Authoring and Versioning (WebDAV).

wide area network (WAN) A communications network spanning a geographically distributed area, which uses a protocol that allows any connected device to interact with any other system on the network. A very popular protocol used in WAN environments is TCP/IP.

Windows 2000 Service A Win32 executable without a user interface that interacts with the Service Control Manager (SCM) to enable an administrator to control (for example, start, stop, or pause) the service application.

Windows Internet Naming Service (WINS) A name resolution service that resolves Windows networking computer names to Internet Protocol (IP) addresses in a routed environment. A server using this service handles name registrations, queries, and releases.

Windows scripting host (WSH) A scripting host for 32-bit Windows platforms that supports Visual Basic Scripting Edition (VBScript) and JavaScript and is capable of handling other script languages through additional ActiveX scripting engines.

Windows Sockets A term that is typically used to refer to the implementation of the Sockets API on the Microsoft Windows operating system. Sometimes, however, Windows Sockets (or Winsock) is also used to refer to TCP Sliding Windows to differentiate it from a previous version of TCP that did not include sliding Windows. See also Sockets.WINS See Windows Internet Naming Service (WINS).

Winsock See Windows Sockets.

WordPerfect Office A predecessor of Novell GroupWise.

workflow A technology to implement business processes into a communication infrastructure through automated message routing, process tracking, reporting, and exception processing.

workflow author A privileged user that can register a workflow process in the Microsoft Web Storage System.

workflow engine The active process in the workflow environment of Microsoft Exchange 2000 Server that receives notifications from the workflow event sink and processes the workflow logic according to the process definition. See also workflow process definition.

Workflow for Exchange 2000 Server A technology in Microsoft Exchange 2000 Server based on Collaboration Data Objects (CDO) for Workflow that provides a high-end workflow infrastructure based on the Web Storage System. See also CDO for Workflow (CDOWF).

workflow process definition The outline or set of rules of a workflow process. See also workflow.

World Wide Web Publishing Service A service in Microsoft Windows 2000 to build Web severs for publishing information in the form of hypertext and hypermedia using Hypertext Markup Language (HTML) and creating collaboration and workflow solutions based on the Hypertext Transfer Protocol (HTTP).

X

X.400 Connector A connector component in Microsoft Exchange 2000 Server to route messages to foreign X.400 systems and to other Exchange servers running an instance of an X.400 Connector. The X.400 Connector is integrated with the Message Transfer Agent (MTA) and can be used to connect sites or routing groups in an organization.

X.500 An International Telecommunications Union (ITU)-T recommendation that defines the internal structure of electronic directory services.

X.509 An International Telecommunications Union (ITU)-T recommendation that describes the syntax and format of security certificates.

X.509 certificate A document issued by a certificate authority that contains security information used for digital signatures and encryption.

XML See Extensible Markup Language (XML).