2008 R2 ADS Vocabulary - Session 5 Flashcards
Active Directory RMS
(AD RMS)
Active Directory RMS is a technology that uses
licenses to protect information for applications enabled to use the service. It safeguards digital information from unauthorized use by defining user’s access rights. These rights specify which users can open, edit, print, forward, or carry out other actions on the information stored on the server.
Windows Server 2008 R2 AD RMS features:
• Improved installation and administration
• Integration with AD FS
• Self-enrollment of AD RMS servers
• New AD RMS administrative roles
AD DS is responsible for validating user’s authorization to access content protected by an AD RMS server.
The AD RMS server issues
issues rights account certificates (RACs), which identify trusted users and groups that are able to publish and assign rights and conditions for rights-protected content.
The AD RMS server creates a publishing license for the content that incorporates the specific usage rights and conditions within the content. This assures protection so that the content can be distributed across networks.
AD RMS client
Clients can acquire licenses to decrypt rights-protected content and apply usage policies from an AD RMS. Client application users with the appropriate RAC can view and work with rights-protected data.
Clients can create rights-protected files and templates. AD RMD rights policy templates are deployed to control the rights that a user or group has on a particular element of rights-protected content
Active Directory Lightweight Directory Services
(AD LDS)
AD LDS provides independent
directory storage and access to applications, and uses the standard application programming interface (API) to access application data.
The following are the features of AD LDS:
- The directory service solution ensures that specialized applications are able to use AD LDS as their own directory service
- Integration with the Network Operating System (NOS). AD LDS uses the same directory technology as AD
- Multiple Independent Instances of AD LDS can be run, with each instance tailored according to the specific application to which it applies
- Security Principles and Access Controls
- The installation of AD LDS does not affect the AD, and AD LDS can be reinstalled without restarting Windows
Active Directory Federated Services
(AD FS)
AD FS is based on a
single sign-on (SSO) technology that supports authentication of users in various web applications in a single browser session. AD FS provides a relationship of trust that is used to verify users’ digital identities and access rights to the trusted partners within and outside the organization.
The following are features of AD FS:
- Installation is incorporated in Windows Server 2008 R2 as a server role.
- Application Support - AD FS is closely integrated with Microsoft Office SharePoint Service (MOSS) 2007 and AD RMS.
- The Establishment of Federated Trusts enables you to work with partner organizations using their internal NOS directories rather than by building forest trusts.
Active Directory Certificate Services
(AD CS)
AD CS
provides services that manage public key certificates, which are implemented in a software security system to authenticate secure data sharing and application access.
is used in organizations to improve security by binding users’ identifications, devices, or services to the corresponding public key certificates.
AD RIGHTS MANAGEMENT SERVICE
(AD RMS)
AD RMS enables you to create
information-protection solutions and apply these solutions to existing applications. Any application that is AD RMS-enabled can be protected. For applications, AD RMS provides persistent usage policies for information.
