Glossary

See permissions.

With Windows NT computers, controls the way passwords must be used by all user accounts of an individual computer. With Windows NT Advanced Servers, controls the way passwords must be used by all user accounts of a domain.

The LAN Manager operator privilege that allows a user (with user privilege) to create, remove, and modify user accounts (except those with admin privilege) and groups. The NetWare equivalent is the user accounts manager. The Windows NT equivalent is the account operator. See also comm operator, operator privilege, print operator, server operator, user account manager.

The privilege level that allows a person to issue all types of administrative commands on a server and to use all the resources shared by the server, regardless of access permissions. User accounts with admin privilege are part of the special user group admins. See also administrator, permissions, privilege level.

See admin privilege.

The person responsible for managing the local area network. The administrator typically configures the network, maintains the network's shared resources and security, assigns passwords and privileges, and helps users. The NetWare equivalent is the supervisor. See also admin privilege, operator privilege, supervisor.

Special property assigned to MS-DOS files and directories that controls what actions affect them. There are many types of attributes that can be assigned to file and directories. The OS/ 2 equivalent is the file flag. In Windows NT, rights and permissions control what actions affect files and directories. See also file flag, permissions, rights.

A record in the audit trail indicating that a user performed a specific action. The audit entry records the action, the user, and the date and time. See also audit trail, auditing.

A file that contains audit entries. See also audit entry, auditing.

Tracking activities of users by recording selected types of events in the security log of a server or a workstation. See also audit entry, audit trail.

Validation of a user's logon information. When a user logs on to an account on a Windows NT workstation, the authentication is performed by that workstation. When a user logs on to an account on a Windows NT Advanced Server domain, that authentication may be performed by any server of that domain. See also server, trust relationships.

A message sent to all users on the local area network or to all users in a domain.

The default groups provided with Windows NT and Windows NT Advanced Server. Built-in groups have been granted useful collections of rights and built-in abilities.

In most cases, a built-in group will provide all the capabilities needed by a particular user. For example, if a domain user account belongs to the built-in administrators group, logging on with that account gives a user administrative capabilities over the domain and the servers of the domain. To provide a needed set of capabilities to a user account, assign it to the appropriate built-in group. In NetWare and LAN Manager, operator privileges provide a similar way to grant multiple users the same capabilities. See also group, User Manager, User Manager for Domains.

A computer that accesses shared network resources provided by another computer. See also client-server applications, server.

Applications that use the capabilities of both your workstation (the client) and the server to perform a task. The client portion of the application is typically optimized for user interaction, whereas the server portion provides the centralized multi-user functionality.

The operator privilege that allows a user (with user privilege) to create, share, and modify communication-device queues and requests. Windows NT, Windows NT Advanced Server, and LAN Manager for UNIX Systems do not support comm operators. See also accounts operator, operator privilege, print operator, server operator.

A queue that stores communication- device requests, and then sends them, one by one, to one or more communication devices such as modems. Windows NT, Windows NT Advanced Server and LAN Manager for UNIX Systems do not support comm queues.

A piece of hardware attached to a serial port of a computer. Examples include modems, serial printers, and image scanners.

A configuration file run when a computer boots that customizes the way the MS-DOS or OS/2 operating system runs. See also LANMAN.INI, PROTOCOL.INI.

A Windows NT database repository for information about a computer's configuration.

The software link between a workstation and a shared resource on a server. A connection can be made from the workstation by assigning a local devicename to a resource shared on a server. A connection also can be made when the resource is accessed by using a network path from a command-line command or an application.

A menu that contains commands you can use to manipulate a window.

The first 640K of memory on MS-DOS computers. If you use no memory managers, this is the only memory that programs can use. See also expanded memory, extended memory (EMS), extended memory blocks, high memory area (HMA), memory manager, upper memory blocks (UMBs).

An architecture that allows protocol drivers to be loaded to memory and unloaded when needed. With NetWare Connectivity, demand protocol architecture is used to load and unload the IPX protocol without requiring the workstation to be rebooted.

Software that enables a computer to recognize and use a specific piece of hardware (device). Although a device may be installed on your system, the network cannot recognize the device until you have installed and configured the appropriate driver.

The copying of a master set of directories from a Window NT Advanced Server (called an export server) to specified servers or workstations (called import computers) in the same or other domains. Replication simplifies the task of maintaining identical sets of directories and files on multiple computers, because only a single master copy of the data must be maintained. Files are replicated when they are added to an exported directory, and every time a change is saved to the file.

A shared disk device, including a drive, a partition, a directory tree, or a single directory.

In LAN Manager and Windows NT Advanced Server networks, a collection of servers and workstations that share a common domain database. Each domain has a unique name. Domains are not available with NetWare or Windows NT. See also domain controller, primary domain controller, trust relationship.

For a Windows NT Advanced Server domain, the server that maintains the security policy and the master database for a domain and authenticates domain logons. The equivalent in LAN Manager domains is the primary domain controller. See also primary domain controller, trust relationship.

See demand protocol architecture (DPA).

With NetWare, a connection between a workstation and a network directory, where one of the workstation's drive letters is assigned to the network directory. With Windows NT and LAN Manager, this is called a connection. See also connection.

See device driver.

With NetWare, the set of rights that actually define what actions a user can take with a file. Effective rights are determined by the trustee rights assigned to the user and the file or directory's maximum rights mask (NetWare 286) or inherited rights mask (NetWare 386). With Windows NT and LAN Manager, the equivalent are the permissions assigned to the user. Windows NT also has rights, which apply to the system as a whole, rather than to individual files or directories. See also inherited rights mask, maximum rights mask, rights, trustee rights.

See expanded memory (EMS).

Any part of memory used by MS-DOS to store the values of certain variables, including the search path.

Memory configured for the Lotus/Intel/Microsoft (LIM) 4.0 expanded memory specification (EMS). Physical expanded memory comes in the form of a card installed on the computer. On 80386- based (and higher) computers, extended memory can emulate expanded memory. See also conventional memory, extended memory, extended memory blocks, high memory area (HMA), upper memory blocks (UMBs).

The area of memory above 1024K. The first 64K of extended memory is the high memory area (HMA); the rest is made of extended memory blocks. See also conventional memory, expanded memory (EMS), extended memory blocks, high memory area (HMA), upper memory blocks (UMBS).

The area of the extended memory above the HMA (above 1088K). See also conventional memory, expanded memory, extended memory (EMS), high memory area (HMA), and upper memory blocks (UMBs).

A NetWare menu utility used by supervisors to monitor the use of a server. With LAN Manager, these functions are done using the Net Admin interface. With Windows NT, these functions are done using the Server Manager, Event Monitor, and Performance Monitor.

See file allocation table (FAT).

A table or list maintained by some operating systems to keep track of the status of various segments of disk space used for file storage.

See attribute.

Special property assigned to an OS/2 file that controls what actions affect the file. There are several types of file flags. See also attribute.

A NetWare operator who can perform some server management tasks, such as starting and stopping processes on the server, viewing connection information, and shutting down the server. The Windows NT Advanced Server and LAN Manager equivalent is the server operator. See also operator privilege, server operator.

A NetWare menu utility used by users to view information about network directories and files; and used by supervisors to create and manage network directories, and to set access rights for them. In LAN Manager, these functions are done using the Net Admin interface. In Windows NT, these functions are done using File Manager.

For Windows NT Advanced Server, a normal user account in a user's home domain. Most user accounts are global accounts. If there are multiple domains in the network, it is best if each user in the network has only one user account, in only one domain, and each user's access to other domains is accomplished through the establishment of domain trust relationships. See also local account.

For Windows NT Advanced Server, a group that can be used in its own domain, servers and workstations of the domain, and trusting domains. In all those places it can be granted rights and permissions and can become a member of local groups. However, it can only contain user accounts from its own domain. Global groups provide a way to create handy sets of users from inside the domain, available for use both in and out of the domain.

Global groups cannot be created or maintained on Window NT workstations. However, for Windows NT workstations that participate in a domain, domain global groups can be granted rights and permissions at those workstations, and can become members of local groups at those workstations. See also group, local group.

With LAN Manager user-level security, a set of users (with user accounts) who share common permissions for one or more resources. A group is used like a username when assigning permissions for resources. Individually assigned user permissions take precedence over those assigned through groups.

In Windows NT User Manager, an account containing other accounts, which are called members. The permissions and rights granted to a group are also provided to its members, making groups a convenient way to grant common capabilities to collections of user accounts. For Windows NT, groups are managed with User Manager. For Windows NT Advanced Server, groups are managed with User Manager for Domains. See also built-in groups, global group, local group, user account, user-level security.

The Windows NT groups to which a user account belongs. Permissions and rights granted to a group are also provided to its members. In most cases, the actions a user can perform in Windows NT are determined by the group memberships of the user account the user is logged on to. See also group.

A unique name identifying a local group or a global group to Windows NT. A group's name cannot be identical to any other group name or user name of its own domain or workstation. See also global group, local group.

The 64K of memory between 1024K and 1088K. You can use memory managers to load programs into the HMA. Only one program at a time can use the HMA. See also conventional memory, expanded memory (EMS), extended memory, extended memory blocks, memory manager, upper memory blocks (UMBs).

See HPFS.

A directory on a server assigned to a user to provide the user with private storage space on the server.

High-performance file system (HPFS); primarily used with the OS/2 operating system version 1.2 or later. It supports long filenames but does not provide security.

See HPFS.

With NetWare 386, a set of rights, defined for a directory or file, that control what can happen to that directory or file. If a user has no assigned trustee rights for a file or a directory, the user's effective rights are a combination of effective rights in the parent directory and the inherited rights mask of the file or directory. There is no Windows NT Advanced Server or LAN Manager equivalent. See also effective rights, permissions, rights, trustee rights.

The network driver used by computers running NetWare. With NetWare, IPX.COM is a monolithic driver, and a different version is needed for each type of network adapter. With LAN Manager NetWare Connectivity, only one IPX.COM version is needed. This IPX.COM is NDIS-compliant and can be used with any NDIS network adapter driver. See also network driver interface specification (NDIS).

A device driver that implements the IPX protocol for computers running NetWare. The demand-loaded version used with the nwload command is generally preferable because of memory savings.

LAN Manager's menu-oriented interface, which includes four versions: the LAN Manager Screen for users (started with the net command), the Net Admin interface for OS/2 (started with the net admin command), the Net Admin interface for Microsoft Windows (started with the NetAdmin icon), and the console version of the Net Admin interface for OS/2 servers (started with the net console command).

The LAN Manager initialization file. The values in this file determine the option settings for computers on the local area network, although the net start and net config command options can temporarily override LANMAN.INI values. These values can be modified to suit the network requirements. See also CONFIG.SYS, PROTOCOL.INI.

For Windows NT Advanced Server, a user account provided in a domain for a user whose global account is not in a trusted domain. Not required where trust relationships exist between domains. See also global account, user account.

For Windows NT, a group that can be granted permissions and rights only for its own workstation. However, it can contain user accounts from its own computer, and (if the workstation participates in a domain) user accounts and global groups both from its own domain and from trusted domains. Local groups provide a way to create handy sets of users from both inside and outside the workstation, to be used only at the workstation.

For Windows NT Advanced Server, a group that can be granted permissions and rights only for the servers of its own domain. However, it can contain user accounts and global groups both from its own domain and from trusted domains. Local groups provide a way to create handy sets of users from both inside and outside the domain, to be used only at servers of the domain. See also global group, group.

With NetWare, a program run automatically when a user logs on that sets up the user's environment. The Windows NT and LAN Manager equivalent is the logon script. See also logon script.

A batch program containing LAN Manager and operating system commands used to configure workstations. When a user logs on, the user's logon script runs at the workstation. The NetWare equivalent is the log-in script. See also log-in script.

In Windows NT Advanced Server, the workstations from which a user is allowed to log on.

A NetWare menu utility used by supervisors to create new users. In LAN Manager, this is done using the Net Admin interface or the net user command. On Windows NT workstations, this is done using the User Manager. On Windows NT Advanced Servers, this is done using the User Manager for Domains.

With NetWare, a person who can perform some limited administrative tasks. The Windows NT and LAN Manager equivalent are the various types of operators. See also operator, operator privilege.

In NetWare 286, a set of access rights, defined for a directory, that controls what can happen to that directory and to the files and subdirectories in it. A user can perform an action on a file only if that particular right appears in both the directory's maximum rights mask and in the user's trustee rights for the directory. There is no Windows NT or LAN Manager equivalent. See also effective rights, permissions, rights, trustee rights.

See network adapter driver.

A program that manages how other programs use memory and makes available parts of memory beyond conventional memory. Two memory managers provided with LAN Manager are HIMEM.DOS and EMM386.DOS. See also conventional memory, expanded memory (EMS), extended memory, extended memory blocks, high memory area (HMA), upper memory blocks (UMBs).

A network device driver that performs both protocol and network adapter driver functions.

See network driver interface specification (NDIS).

See LAN Manager Screen.

For Windows NT Advanced Server, performs authentication of domain logons, and keeps the domain's database synchronized between the domain controller and the other Windows NT Advanced Servers of the domain. The equivalent in LAN Manager is the Netlogon service.

A file containing a LAN Manager server's user accounts database and resource permissions. Only servers with user-level security have a NET.ACC file. The NET.ACC file is stored in the LANMAN\ACCOUNTS directory. See also user accounts database.

The NetBIOS Extended User Interface network device driver. NetBEUI is the protocol driver supplied with LAN Manager. NetBEUI can bind with as many as eight network adapter drivers. For MS-DOS, the filename for the NetBEUI driver is NETBEUI.DOS. For OS/2 clients and LAN Manager servers, the filename for the NetBEUI driver is NETBEUI.OS2.

The network basic input/ output system. A software module that links the operating system with local area network hardware and opens communications between workstations on the network.

A printed circuit board, installed in a computer, that enables the computer to run LAN Manager software and join the local area network.

A network device driver that works directly with the network adapter, acting as an intermediary between the adapter and the protocol driver. See also device driver, protocol driver.

See device driver.

See device driver.

A Microsoft/3COM specification for the interface for local area network device drivers. All network adapter and protocol drivers shipped with LAN Manager conform to the NDIS. The IPX.COM generated by NetWare Connectivity also conforms to the NDIS.

The complete name of a directory or a file on a server, as seen from other network computers. Windows NT and LAN Manager network paths start with the name of the server and the sharename, and then follow the directory path down to the name of the directory or file. For example, \\SALES\PUBLIC\REPORTS\JAN.DA T. NetWare network paths start with the name of the server, then the volume name, and then follow the directory path. For example, SALES/SYS:/PUBLIC/ REPORTS/JAN.DAT.

A special version of the NetWare workstation shell that runs with all versions of MS-DOS. Every NetWare workstation must have either the NETX.COM file, the NETX.EXE file or the NetWare shell appropriate to its version of MS-DOS (NET3.COM, NET4.COM, or NET5.COM).

One of three versions of the NetWare workstation shell. The three versions are NET3.COM, which runs on workstations that have MS-DOS 3.x; NET4.COM, which runs on workstations that have MS-DOS 4.x; and NET5.COM, which runs on workstations that have MS-DOS 5.0. Every NetWare workstation must have either the file appropriate to its version of MS-DOS or the NETX.COM or NETX.EXE file, special versions of the shell that run with all versions of MS-DOS.

A special version of the NetWare workstation shell that runs with all versions of MS-DOS. Every NetWare workstation must have either the NETX.COM file, the NETX.EXE file or the NetWare shell appropriate to its version of MS-DOS (NET3.COM, NET4.COM, or NET5.COM).

See Windows NT.

See NTFS.

An advanced file system designed for use specifically within the Windows NT operating system. It supports file system recovery, extremely large storage media, and various features for the POSIX subsystem. It also supports object-oriented applications by treating all files as objects with user- defined and system-defined attributes.

A batch program used to run NetWare Connectivity. NWLOAD.BAT saves the workstation's MS-DOS configuration, and then starts NetWare Connectivity by starting IPX.COM and NETx.COM. NetWare Support runs until the user stops it by running NWUNLOAD.BAT.

The batch program that stops NetWare Connectivity and unloads it from memory, and then restores the MS-DOS configuration saved when NetWare Connectivity was started.

A user who has certain limited administrative abilities. In LAN Manager, these abilities are granted by setting operator privileges in the user's account. In Windows NT, these abilities are set by the user's group, and the rights assigned to that group. See also accounts operator, comm operator, group, manager, operator privilege, print operator, rights, server operator.

A privilege granted to a LAN Manager user that allows the user to perform certain limited administrative tasks. The equivalent in Windows NT is determined by the user's group. See also accounts operator, comm operator, group, operator, print operator, server operator.

A set of directory names and filenames that defines the location of a directory or file. A backslash (\) precedes each directory name and filename except the top-level one. (For example, the path REPORTS\ACCT\NORTH.DAT indicates that the NORTH.DAT file is in the ACCT subdirectory of the REPORTS directory.) An initial backslash indicates that the path begins at the drive's root directory. See also network path, search path.

A NetWare menu utility used by supervisors to create printer queues and to manage print jobs within existing printer queues. In LAN Manager, these tasks can be done using the Net Admin interface. In Windows NT, these tasks can be done using Print Manager.

Settings that define the type(s) of action a user can take with a shared resource. With LAN Manager user-level security, each user is assigned permissions for each resource. With LAN Manager share-level security, each resource is assigned permissions, and all users who access the resource have those permissions. See also effective rights, rights, trustee rights.

The LAN Manager server that maintains the master copy of a domain's user accounts database. The primary domain controller also validates logon requests. In Windows NT Advanced Server domains, the equivalent is the domain controller. See also domain controller.

A document waiting in a printer queue.

With NetWare, information about printer and paper types to be used for certain print jobs. With Windows NT and LAN Manager, you can set this information when you create a printer queue using Print Manager.

With Windows NT and LAN Manager, an operator privilege that allows a user to create, share, and modify printer queues and control print jobs. The NetWare equivalent is the queue operator. See also operator privilege, queue operator.

A NetWare operator who can manage the printers attached to a special workstation called a print server. There is no Windows NT or LAN Manager equivalent because they have no special print servers; however, Windows NT and LAN Manager print operators can perform the same tasks on LAN Manager printer queues. See also operator privilege, print operator.

A NetWare menu utility used by supervisors to create print job configurations, which contain information about printer and paper types to be used for print jobs. With Windows NT and LAN Manager, an administrator defines this type of information when creating a printer queue. See also print job configuration.

A NetWare menu utility used by supervisors to define information about network printers. With Windows NT and LAN Manager, an administrator defines this information when creating a printer queue.

A queue that stores print jobs and then sends them one by one to a printer or pool.

See privilege level.

With LAN Manager user-level security, one of three settings—user, admin, or guest— assigned for each user account, that defines the range of actions a user can perform on the network. See also admin privilege.

A set of rules and conventions for data exchange. See also protocol driver.

A network device driver that implements a protocol, communicating between a network and one or more network adapter drivers. With NetWare Connectivity, IPX.COM is a protocol driver. See also network adapter driver.

Software (PROTMAN.DOS on computers running MS-DOS) that coordinates communication among network device drivers and network adapters.

The Protocol Manager initialization file. This file, along with CONFIG.SYS and LANMAN.INI, controls the configuration of LAN Manager network device drivers. PROTOCOL.INI describes all protocol drivers and network adapter drivers and defines how to bind them together. See also CONFIG.SYS, LANMAN.INI.

With NetWare, an operator who manages printer queues and print jobs. The Windows NT and LAN Manager equivalent is print operator. See also operator privilege, print operator.

See configuration registry.

Administration of one computer by an administrator located at another computer and connected to the first computer across the network.

See directory replication.

Any part of a computer system or a local area network, such as a disk drive, directory, printer, or memory, that can be allotted to a program or a process while it is running. See also disk resource.

With NetWare, settings that affect what actions can be taken with a single file or all files in a directory. NetWare has several different rights, each of which controls one type of action. The Windows NT and LAN Manager equivalents are permissions. With Windows NT, rights apply to the whole system, rather than a single file or directory. See also effective rights, inherited rights mask, maximum rights mask, permissions, rights, trustee rights.

See log-in script, logon script.

With NetWare, a network drive the workstation checks when a user requests to run a program. If a user requests to run a program that isn't in the user's current directory, NetWare looks for the program in the user's search drives. With LAN Manager, this can be done with the MS-DOS path command. See also search path.

A list of directories that are searched when a user requests to run a program not in the current directory. If the program is in any directory on the search path, the program will run.

The method of controlling access to network resources, ensuring that resources are used only by authorized people. See also share-level security, user-level security.

With NetWare, the act of giving one user the same access rights as another. There is no LAN Manager equivalent. With Windows NT, you can put users in the same group, so that they have the same rights as another user in that group.

A unique name that identifies a logged-on user to the security system. Security IDs (SIDs) can identify one user, or a group of users.

See security ID.

For a Windows NT workstation, the security policies consist of the Account, User Rights, and Audit policies, and are managed using User Manager.

For a Windows NT Advanced Server domain, the security policies consist of the Account, User Rights, Audit, and Trust Relationships policies, and are managed using User Manager for Domains.

Settings that determine how user account passwords can be changed and what action occurs when users violate their logon hours.

A computer on a local area network that controls access to resources such as files and printers. In Windows NT Advanced Server domains, refers to a computer that receives a copy of the domain's security policy and domain database, and authenticates network logons. See also client, domain controller.

LAN Manager and Windows NT server operators can start and stop services, share resources, use the server's error log, and close users' sessions. The NetWare equivalent is file- server console operator. See also file- server console operator, operator privilege.

A process that performs a specific system function and often provides an application programming interface (API) for other processes to call.

A link between a workstation and a server. A session consists of one or more connections to shared resources. See also connection.

The program that installs LAN Manager software on a workstation or a server. During installation, the Setup program is copied to the computer's hard disk for later use in managing the computer's configuration.

To make resources, such as directories and printers, available to network users.

A type of LAN Manager security that limits access to each shared resource by requiring a password. Permissions are assigned to the resource rather than to the user. All users who know the password can use the resource within the bounds of the permissions assigned to the resource. See also user-level security.

A directory that network users can connect to.

See shared directory.

A resource on a server that has been made available to network users. See also resource.

The name given to a resource when it is shared on the local area network. Each shared resource is identified by its sharename. Each resource on a server must have a unique sharename.

The act of making a server's resources available to local area network users. The procedure for sharing a resource depends on the type of resource. See also resource.

See security ID.

The person responsible for setting up, installing, and managing a NetWare network. The supervisor always has access to all resources on the NetWare network. The name supervisor is also the username of the account the supervisor uses to log on. The Windows NT and LAN Manager equivalent is the administrator. See also admin privilege, administrator.

To replicate the domain database from one Windows NT Advanced Server domain controller to one server of the domain, or to all the servers of a domain. This is usually performed automatically by the system, but can also be invoked manually by an administrator.

A NetWare menu utility used by users to check their status on the server and to find other information, and used by supervisors to create users and groups, set trustee rights on network resources, and create log-in scripts. With LAN Manager, users and administrators use the Net Admin Interface for these tasks. With Windows NT, administrators use the Server Manager, User Manager and File Manager for these tasks.

A program that runs in the background, allowing other programs to be run at the same time.

See trust relationship.

Links between Windows NT Advanced Server domains that enable pass-through authentication, in which a user has only one user account in one domain yet can access the entire network. User accounts and global groups defined in a trusted domain can be given rights and resource permissions in a trusting domain, even though those accounts don't exist in the trusting domain's database. A trusting domain honors the logon authentications of a trusted domain. See also global group, user account.

With NetWare, settings that define the types of actions a user can take with a network file or directory. With NetWare 286, trustee rights can be set only on directories; with NetWare 386, they can also be set for individual files. The Windows NT and LAN Manager equivalent is permissions. See also effective rights, inherited rights mask, maximum rights mask, permissions, rights.

See terminate-and-stay-resident program.

See upper memory blocks.

The area of memory between 640K and 1024K. This area typically holds video buffers as well as other buffers, plus work areas that are related to peripheral devices. By using memory managers, you can load other programs into UMBs as well. See also conventional memory, expanded memory (EMS), extended memory, extended memory blocks, high memory area (HMA), memory manager.

A record on a server or in a domain that contains information about the user and identifies the user to LAN Manager or Windows NT. This includes such things as the user name and password required for the user to log on, the groups in which the user account has membership, and the rights and permissions the user has for using the system and accessing its resources. For Windows NT, user accounts are managed with User Manager. For Windows NT Advanced Server, use accounts are managed with User Manager for Domains. See also group.

A NetWare operator who can manage and modify user accounts. The LAN Manager equivalent is the accounts operator, and the Windows NT equivalent is the account operator. See also accounts operator, operator privilege.

The LAN Manager NET.ACC file stored in the LANMAN\ACCOUNTS directory. This file contains the user accounts and groups that have been established. See also NET.ACC, group, user account.

See group.

A Windows NT workstation tool used to manage the security for a workstation. Administers user accounts, groups, security policies.

A Windows NT Advanced Server tool used to manage security for a domain or an individual computer. Administers user accounts, groups, security policies.

See rights.

A type of security in LAN Manager in which a user account is set up for each user. Permissions are granted to each user for specific resources, defining exactly what actions each user can take with each resource. See also share-level security.

The portable, secure, 32- bit, preemptive multitasking member of the Microsoft Windows operating system family.

A superset of Windows NT, Windows NT Advanced Server provides centralized management and security, advanced fault tolerance and additional connectivity.

A NetWare operator who can manage some network areas for a workgroup of users. A workgroup manager can create user accounts for those users, modify and delete those accounts, and create and manage printer queues for the group. Windows NT and LAN Manager have no direct equivalent, although some of the tasks that accounts operators and print operators can perform are similar. See also account(s) operator and print operator.

A computer from which a person uses word processing, spreadsheet, database, and other types of applications to accomplish work, taking advantage of resources shared on the local area network.