P

p-node

A NetBIOS node type that uses point-to-point communication with a name server to resolve names as IP addresses.

package

An icon that represents embedded or linked information. That information can consist of a complete file, such as a Paint bitmap, or part of a file, such as a spreadsheet cell. When a package is chosen, the application used to create the object either plays the object (if it is a sound file, for example) or opens and displays the object. If the original information is changed, linked information is then updated. However, embedded information needs to be manually updated. In Systems Management Server, an object that contains the files and instructions for distributing software to a distribution point. See also embedded object; linked object; object linking and embedding (OLE).

package distribution

In Systems Management Server, the process of placing a decompressed package image on distribution points, sharing that image, and making it accessible to clients. This process occurs when you specify distribution points for a package.

packet

A transmission unit of fixed maximum size that consists of binary information. This information represents both data and a header containing an ID number, source and destination addresses, and error-control data.

packet filtering

Prevents certain types of network packets from either being sent or received. This can be employed for security reasons (to prevent access from unauthorized users) or to improve performance by disallowing unnecessary packets from going over a slow connection. See also packet.

page fault

An error that occurs when the requested code or data cannot be located in the physical memory that is available to the requesting process.

page-description language (PDL)

A computer language that describes the arrangement of text and graphics on a printed page. See also printer control language (PCL); PostScript.

paging

The process of moving virtual memory back and forth between physical memory and the disk. Paging occurs when physical memory limitations are reached and only occurs for data that is not already "backed" by disk space. For example, file data is not paged out because it already has allocated disk space within a file system. See also virtual memory.

paging file

A hidden file on the hard disk that Windows 2000 uses to hold parts of programs and data files that do not fit in memory. The paging file and physical memory, or RAM, comprise virtual memory. Windows 2000 moves data from the paging file to memory as needed and moves data from memory to the paging file to make room for new data. Also called a swap file. See also random access memory (RAM); virtual memory.

paper source

The location (such as Upper Paper Tray or Envelope Feeder) of the paper at the printer.

parent class

All structural object classes are subclasses, directly or indirectly, of a single abstract object class, which is called top. Every object represented in the directory belongs to top and, as a result, every entry must have an objectClass attribute. When you create a new class, you must specify the superclass. If you are not creating a subclass of an existing class, the new class is a subclass of top.

The parent object becomes a superclass of the new object. Superclass is a classSchema object from which one or more other classSchema objects inherit information. The inherited information includes mandatory and optional attributes (systemMust-Contain, mustContain, systemMayContain, and mayContain) and its parent classes in the directory hierarchy (systemPossSuperiors and possSuperiors).

parent domain

For DNS and Active Directory, domains that are located in the namespace tree directly above other derivative domain names (child domains). For example, "reskit.com" would be the parent domain for "eu.reskit.com," a child domain. See also child domain; directory partition; domain.

parent object

The object that is the immediate superior of another object in a hierarchy. A parent object can have multiple subordinate, or child, objects. In Active Directory, the schema determines what objects can be parent objects of what other objects. Depending on its class, a parent object can be the child of another object. See also child object; object.

parent-child trust relationship

The two-way, transitive trust relationship that is established when a domain is added to an Active Directory tree. The Active Directory installation process automatically creates a trust relationship between the domain you are creating (the new child domain) and the parent domain.

parenting

The concept of managing the growth and delegation of a parent domain into further child domains, which are derived and delegated from the parent name. See also child domain; parent domain.

partial replica

A read-only replica of a directory partition that contains a subset of the attributes of all objects in the partition. Each Global Catalog contains partial replicas of all domains in the forest. The attributes contained in a partial replica are defined in the schema as the attributes whose attributeSchema objects have the isMemberOfPartialAttributeSet attribute set to TRUE. See also full replica; Global Catalog.

partition

A logical division of a hard disk. Partitions make it easier to organize information. Each partition can be formatted for a different file system. A partition must be completely contained on one physical disk, and the partition table in the Master Boot Record for a physical disk can contain up to four entries for partitions.

partition knowledge table (PKT)

Repository of information about the Dfs topology and its mappings to the underlying physical shares. For a domain-based Dfs root, the PKT is stored in Active Directory and made available to each server that hosts a domain-based Dfs root. For a stand-alone Dfs root, the PKT is stored in the individual server's registry.

partition table

An area of the Master Boot Record that the computer uses to determine how to access the disk. The partition table can contain up to four partitions for each physical disk.

pass-through VPN connection

A less common combined Internet and intranet virtual private network (VPN) connection.

password authentication protocol (PAP)

A simple, plaintext authentication scheme for authenticating PPP connections. The user name and password are requested by the remote access server and returned by the remote access client in plaintext.

path

A sequence of directory (or folder) names that specifies the location of a directory, file, or folder within the Windows directory tree. Each directory name and file name within the path must be preceded by a backslash (\). For example, to specify the path of a file named Readme.doc located in the Windows directory on drive C, type C:\Windows\Readme.doc.

path maximum transmission unit (PMTU)

The maximum packet size that is supported by all of the network technologies in a path between a source and destination host.

path maximum transmission unit discovery

The process of discovering the maximum sized IP datagram that can be sent along a path without fragmentation.

pattern match

In Network Monitor, specific pattern of ASCII or hexadecimal data. A pattern match can be used in setting a filter or capture trigger. See also offset.

paused

The state of a node that is a fully active member in the server cluster but cannot host groups. The paused state is provided for an administrator to perform maintenance. See also; failback; failover; node; offline.

PC Card

A removable device, approximately the size of a credit card, that can be plugged into a PCMCIA (Personal Computer Memory Card International Association) slot in a portable computer. PCMCIA devices can include modems, network adapters, and hard disk drives.

PC/SC smart card specification

An open standard for smart cards and smart card readers published by the PC/SC Workgroup, a consortium of industry-leading computer software and hardware manufacturers.

performance counter

In System Monitor, a data item associated with a performance object. For each counter selected, System Monitor presents a value corresponding to a particular aspect of the performance that is defined for the performance object. See also performance object.

Performance Monitor

A Windows NT administrative tool that monitors performance on local or remote computers. Performance Monitor is replaced by the Performance console in Windows 2000. See also System Monitor.

performance object

In System Monitor, a logical collection of counters that is associated with a resource or service that can be monitored. See also performance counter.

peripheral component interconnect (PCI)

A specification introduced by Intel Corporation that defines a local bus system that allows up to 10 PCI-compliant expansion cards to be installed in the computer.

permanent virtual circuit (PVC)

A virtual circuit assigned to a preconfigured static route.

permission

A rule associated with an object to regulate which users can gain access to the object and in what manner. Permissions are granted or denied by the object's owner. See also object; privilege; user rights.

persistent connection

A connection that is always active. For instance, the WINS servers in Windows 2000 use persistent connections to constantly update their WINS databases.

persistent demand-dial connection

A demand-dial connection that uses a dial-up WAN technology when the cost of the link is fixed. A persistent demand-dial connection can be active 24 hours a day. Examples of WAN technologies for persistent demand-dial connections include local calls that use analog phone lines, leased analog lines, and flat-rate ISDN. If a persistent connection is lost, the calling router immediately attempts to reestablish the connection.

persistent route

Routes that are not based on the TCP/IP configuration, that are automatically added to the IP routing table when the TCP/IP protocol is started. Routes added to the IP routing table using the route utility with the "-p" command line option are recorded.

persistent router-to-router VPN connection

A scenario in which both the calling and answering routers are permanently connected to the Internet.

personal identification number (PIN)

A secret identification code that is used to protect smart cards from misuse. The PIN is similar to a password and is known only to the owner of the card. The smart card can be used only by someone who possesses the smart card and knows the PIN. See also smart card.

physical layer

A software layer that transmits bits from one computer to another and regulates the transmission of a stream of bits over a physical medium. This layer defines how the cable is attached to the network adapter and which transmission technique is used to send data over the cable.

physical media

A storage object that data can be written to, such as a disk or magnetic tape. A physical medium is referenced by its physical media ID (PMID).

physical stores

See certificate stores.

physical unit (PU)

An IBM Systems Network Architecture component that monitors and manages the resources of a network node as requested by the systems services control point.

Ping

A tool that verifies connections to one or more remote hosts. The ping command uses the ICMP Echo Request and Echo Reply packets to determine whether a particular IP system on a network is functional. Ping is useful for diagnosing IP network or router failures. See also Internet Control Message Protocol (ICMP).

ping of death

A denial of service attack where malicious users send one or multiple 64-KB ICMP Echo Request messages. The 64-KB messages are fragmented and must be reassembled at the destination host. For each separate 64-KB message, the TCP/IP protocol must allocate memory, tables, timers, and other resources. With enough fragmented messages, a host can become bogged down so that the servicing of valid information requests is impaired.

PKI

See public key infrastructure.

placeholder

A Remote Storage identifier for an NTFS volume. See also Remote Storage.

plaintext

Data that is not encrypted. Sometimes also called clear text. See also ciphertext; encryption; decryption.

Plug and Play

A set of specifications developed by Intel that allows a computer to automatically detect and configure a device and install the appropriate device drivers.

PMTU

See Path Maximum Transmission Unit.

PMTU black hole router

A router that silently discards IP datagrams that require fragmentation when the Don't Fragment (DF) flag in the IP header is set to 1.

PMTU Discovery

See path maximum transmission unit discovery.

point of presence (POP)

The local access point for a network provider. Each POP provides a telephone number that allows users to make a local call for access to online services.

point-to-LAN remote access connectivity

In internetworking, when remote access clients are transparently connected to the network to which the remote access server is attached.

Point-to-Point Protocol (PPP)

An industry standard suite of protocols for the use of point-to-point links to transport multiprotocol datagrams. PPP is documented in RFC 1661.

point-to-point remote access connectivity

In internetworking, when remote access clients connect to remote access servers and are connected only to the remote access server.

Point-to-Point Tunneling Protocol (PPTP)

A tunneling protocol that encapsulates Point-to-Point Protocol (PPP) frames into IP datagrams for transmission over an IP-based internetwork, such as the Internet or a private intranet.

pointer (PTR) resource record

A resource record used in a reverse lookup zone created within the in-addr.arpa. domain to designate a reverse mapping of a host IP address to a host DNS domain name. See also resource record.

poison reverse

A process that, used with split horizon, improves RIP convergence over simple split horizon by advertising all network IDs. However, the network IDs learned in a given direction are advertised with a hop count of 16, indicating that the network is unavailable. See also split horizon.

policy agent

An Internet Protocol security mechanism that retrieves the computer's assigned Internet Protocol security policy from the Windows 2000 directory service (or the registry if the computer is not connected to a domain) and passes it to the IKE service to use when establishing secure communications. See also Internet Protocol security policy.

port

A mechanism that allows multiple sessions. A refinement to an IP address. In Device Manager, a connection point on a computer where devices that pass data in and out of a computer can be connected. For example, a printer is typically connected to a parallel port (also known as an LPT port), and a modem is typically connected to a serial port (also known as a COM port).

port monitor

A device that controls the computer port that provides connectivity to a local or remote print device.

port rule

For Network Load Balancing, a set of configuration parameters that determine the filtering mode to be applied to a range of ports. See also filtering mode.

Portable Operating System Interface for UNIX (POSIX)

An IEEE (Institute of Electrical and Electronics Engineers) standard that defines a set of operating-system services. Programs that adhere to the POSIX standard can be easily ported from one system to another. POSIX was based on UNIX system services, but it was created in a way that allows it to be implemented by other operating systems.

POSIX

See Portable Operating System Interface for UNIX.

possible owner

A node on which a resource can operate, and which has been added to the resource's list of possible owners. Resources fail over only to possible owners.

possSuperiors

A multivalued property that specifies the classes that can be legal parents of instances of this class. For an existing classSchema object, values can be added to this property but not removed.

Each value is the lDAPDisplayName of a class. You must ensure that the classes exist or will exist when the new class is written to the directory. If one of the classes does not exist, the classSchema object will fail to be added to the directory.

The full set of possible superiors is the union of the systemPossSuperiors and possSuperiors on this class as well as the systemPossSuperiors and possSuperiors properties of all inherited superclasses (structural or abstract classes). Note that possSuperiors are not inherited from auxiliary classes.

POST

See power-on self test.

Post Office Protocol

A maildrop service that allows a client to retrieve mail that the server is holding for it. The most recent implementation is Version 3, or POP3.

PostScript

A page-description language (PDL) developed by Adobe Systems for printing with laser printers. PostScript offers flexible font capability and high-quality graphics. It is the standard for desktop publishing because it is supported by imagesetters, the high-resolution printers used by printing services for commercial typesetting. See also printer control language (PCL); page-description language (PDL).

PostScript printer

A printer that uses the PostScript page-description language (PDL) to create text and graphics on the output medium, such as paper or overhead transparency. See also page-description language (PDL); PostScript.

power-on self test (POST)

A set of routines stored in read-only memory (ROM) that tests various system components such as RAM, the disk drives, and the keyboard, to see if they are properly connected and operating. If problems are found, these routines alert the user with a series of beeps or a message, often accompanied by a diagnostic numeric value. If the POST is successful, it passes control to the bootstrap loader.

PPP

See Point-to-Point Protocol.

PPTP client

See Point-to-Point Tunneling Protocol client.

PPTP server

See Point-to-Point Tunneling Protocol server.

pre-shared key

An authentication technology used by IPSec. Pre-shared means the parties must agree on a shared, secret key that becomes part of the IPSec policy. Information is encrypted before transmission using the shared key, and decrypted on the receiving end using the same key. If the receiver can decrypt the information, identities are considered authenticated.

preferred server

The NetWare bindery-based (NetWare 2.x, and 3.x) server to which you connect by default when you log on to your computer. The preferred server validates your user credentials and is queried when you request information about resources available on the NetWare network.

premigrated file

An object that has been copied to remote storage in preparation for truncation, but remains on the managed volume. When it is truncated, it will become a placeholder for the file.

presentation layer

A network layer that translates data from the application layer into an intermediary format. This layer also manages security issues by providing such services as data encryption, and compresses data so that fewer bits need to be transferred on the network.

primary domain controller

A Windows NT 4.0 and 3.51 domain controller that is the first one created in the domain and contains the primary storehouse for domain data. Within the domain, the primary domain controller periodically replicates its data to the other domain controllers, known as backup domain controllers. See also backup domain controller.

primary domain controller emulator

The first Windows 2000 domain controller created in a domain. In addition to replicating domain data to the other Windows 2000 domain controllers, the primary domain controller emulator acts like a Windows NT primary domain controller in that it performs primary domain controller duties, including replication of domain data to any backup domain controllers within the domain. If the primary domain controller emulator goes offline, another Windows 2000 domain controller in the domain can assume the primary domain controller emulator role. See also primary domain controller; backup domain controller.

primary domain controller emulator master

The domain controller assigned to act as a Windows NT primary domain controller (PDC) to service network clients that do not have Active Directory client software installed, and to replicate directory changes to any Windows NT backup domain controllers (BDCs) in the domain. For a Windows 2000 domain operating in native mode, the PDC emulator master receives preferential replication of password changes performed by other domain controllers in the domain and handles any password authentication requests that fail at the local domain controller. At any time, there can be only one PDC emulator in a particular domain. See also Active Directory; backup domain controller; domain controller; multimaster replication; operations master; primary domain controller; replication.

primary domain name

The name used to indicate the domain in which the computer resides. See also connection-specific domain name.

primary partition

A volume created using unallocated space on a basic disk. Windows 2000 and other operating systems can start from a primary partition. As many as four primary partitions can be created on a basic disk, or three primary partitions and an extended partition. Primary partitions can be created only on basic disks and cannot be subpartitioned. See also basic disk; dynamic volume; extended partition; partition.

primary server

An authoritative DNS server for a zone that can be used as a point of update for the zone. Only primary masters have the ability to be updated directly to process zone updates, which include adding, removing, or modifying resource records that are stored as zone data. Primary masters are also used as the first sources for replicating the zone to other DNS servers.

primary token

The access token assigned to a process to represent the default security information for that process. It is used in security operations by a thread working on behalf of the process itself rather than on behalf of a client. See also access token; impersonation token; process.

primary zone

A copy of the zone that is administered locally. See also zone, secondary zone.

print device

A hardware device used for printing that is commonly called a printer. See also logical printer.

print processor

A PostScript program that understands the format of a document's image file and how to print the file to a specific printer or class of printers. See also PostScript.

print server

A computer that is dedicated to managing the printers on a network. The print server can be any computer on the network.

Print Server for Macintosh

A Services for Macintosh service that enables Macintosh clients to send and spool documents to printers attached to a computer running Windows 2000 Server, and allows clients to send documents to printers on an AppleTalk network. Print Server for Macintosh is also called MacPrint.

print server service

A service that receives print jobs from remote print clients. Different services are provided for different clients.

Print Services for UNIX

A print server service for UNIX clients. See also print server service.

print sharing

The ability for a computer running Windows 2000 Professional or Windows 2000 Server to share a printer on the network.

print spooler

Software that accepts a document sent to a printer and then stores it on disk or in memory until the printer is ready for it. This collection of dynamic-link libraries (DLLs) receives, processes, schedules, and distributes documents for printing. The term spooler is an acronym created from "simultaneous print operations online." See also spooling.

printer control language (PCL)

The page-description language (PDL) developed by Hewlett Packard for their laser and inkjet printers. Because of the widespread use of laser printers, this command language has become a standard in many printers. See also page-description language (PDL); PostScript.

printer driver

A program designed to allow other programs to work with a particular printer without concerning themselves with the specifics of the printer's hardware and internal language. By using printer drivers that handle the subtleties of each printer, programs can communicate properly with a variety of printers. See also printer control language (PCL); PostScript.

printer fonts

Fonts residing in or intended for a printer. A printer font, usually located in the printer's read-only memory (ROM), can be internal, downloaded, or on a font cartridge. See also font.

printer job language (PJL)

The printer command language developed by Hewlett Packard that provides printer control at the print-job level. Using PJL commands, default printer settings such as the number of copies to print can be changed. PJL commands also permit switching printer languages between print jobs without action by the user. If bi-directional communication is supported, a PJL-compatible printer can send information such as printer model and job status to the print server. See also printer control language (PCL); page-description language (PDL); PostScript.

printer permissions

Permissions that specify the type of access that a user or group has to a printer. The printer permissions are Print, Manage Printers, and Manage Documents.

printers folder

The folder in Control Panel that contains the Add Printer wizard and icons for all the printers installed on your computer.

priority

A precedence ranking that determines the order in which the threads of a process are scheduled for the processor.

priority inversion

The mechanism that allows low-priority threads to run and complete execution rather than being preempted and locking up a resource such as an I/O device.

private address space

The set of private addresses. The private address space consists of the following three blocks of addresses: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16.

private addresses

IP addresses that are designed to be used by organizations for private intranet addressing within one of the following blocks of addresses: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16.

private key

The secret half of a cryptographic key pair that is used with a public key algorithm. Private keys are typically used to digitally sign data and to decrypt data that has been encrypted with the corresponding public key. See also public key.

private ports

See dynamic ports.

privilege

A user's right to perform a specific task, usually one that affects an entire computer system rather than a particular object. Privileges are assigned by administrators to individual users or groups of users as part of the security settings for the computer. See also access token; permission; user rights.

privileged mode

Also known as kernel mode, the processing mode that allows code to have direct access to all hardware and memory in the system.

process

An operating system object that consists of an executable program, a set of virtual memory addresses, and one or more threads. When a program runs, a Windows 2000 process is created. See also thread.

promiscuous mode

A feature of the network adapter that supports the detection of all frames sent over the network segment.

protected storage service

A service that provides applications with a place to store per-user data that must be kept secret or free from modification. Protected storage uses the Hash-based Message Authentication Code (HMAC) and the SHA1 cryptographic hash function to encrypt the user's master key.

protection against wrapped sequence numbers (PAWS)

The use of TCP timestamps to prevent a TCP receiver from misinterpreting a new sequence number with an old sequence number that it is expecting to receive.

protocol

A set of rules and conventions by which two computers pass messages across a network. Networking software usually implements multiple levels of protocols layered one on top of another. Windows NT and Windows 2000 include NetBEUI, TCP/IP, and IPX/SPX-compatible protocols.

protocol number

A field in the IP packet which identifies the next level higher in the protocol stack.

pruning

A process that removes unavailable printers from Active Directory listing. An orphan pruner program running on the domain controller periodically checks for orphaned printers, that is, printers that are offline or powered down, and deletes the printer objects of the printers it cannot find.

PTR (pointer) resource record

See pointer (PTR) resource record.

public addresses

IP addresses assigned by the Internet Network Information Center (InterNIC) that are guaranteed to be globally unique and reachable on the Internet.

public key

The non-secret half of a cryptographic key pair that is used with a public key algorithm. Public keys are typically used to verify digital signatures or decrypt data that has been encrypted with the corresponding private key. See also private key.

public key certificate

A digital passport that serves as proof of identity. Public key certificates are issued by a certification authority (CA). See also certification authority (CA); Kerberos authentication protocol.

public key cryptography

A method of cryptography in which two different but complimentary keys are used: a public key and a private key for providing security functions. Public key cryptography is also called asymmetric key cryptography. See also cryptography; public key; private key.

public key cryptography standards (PKCS)

A family of standards for public key cryptography that includes RSA encryption, Diffie-Hellman key agreement, password-based encryption, extended-syntax, cryptographic message syntax, private key information syntax, and certificate request syntax, as well as selected attributes. Developed, owned and maintained by RSA Data Security, Inc. See also certificate; public key.

public key infrastructure (PKI)

The term generally used to describe the laws, policies, standards, and software that regulate or manipulate certificates and public and private keys. In practice, it is a system of digital certificates, certification authorities, and other registration authorities that verify and authenticate the validity of each party involved in an electronic transaction. Standards for PKI are still evolving, even though they are being widely implemented as a necessary element of electronic commerce. See also certificate; certification authority; public key cryptography.

public-key algorithm

An asymmetric cipher that uses two keys, one for encryption, the public key, and the other for decryption, the private key. See also public key encryption; public key; private key; symmetric-key algorithm.

public-key encryption

A method of encryption that uses two encryption keys that are mathematically related. One key is called the private key and is kept confidential. The other is called the public key and is freely given out to all potential correspondents. In a typical scenario, a sender uses the receiver's public key to encrypt a message. Only the receiver has the related private key to decrypt the message. The complexity of the relationship between the public key and the private key means that, provided the keys are long enough, it is computationally infeasible to determine one from the other. Public key encryption is also called asymmetric encryption. See also public key; symmetric key encryption.

public/private key pair

A set of cryptographic keys used for public key cryptography. One key is used to encrypt, the other to decrypt. See also public key; private key.

published applications

An application that is available to users managed by a Group Policy object. Each user decides whether or not to install the published application by using Add/Remove Programs in Control Panel.

pull partner

A Windows Internet Name Service (WINS) feature that pulls in replicas from its push partner by requesting them and then accepting the pushed replicas. See also push partner.

push partner

A Windows Internet Name Service (WINS) feature that sends replicas to its pull partner upon receiving a request from the pull partner. See also pull partner.

Q

QoS Admission Control Service

A software service that controls bandwidth and network resources on the subnet to which it is assigned. Important applications can be given more bandwidth, less important applications less bandwidth. The QoS Admission Control Service can be installed on any network-enabled computer running Windows 2000.

Quality of Service (QoS)

A set of quality assurance standards and mechanisms for data transmission, implemented in Windows 2000.

quantization noise

The noise introduced on an analog dial-up connection due to an analog to digital conversion.

quantum

Also known as a time slice, the maximum amount of time a thread can run before the system checks for another ready thread of the same priority to run

queue

A list of programs or tasks waiting for execution. In Windows 2000 printing terminology, a queue refers to a group of documents waiting to be printed. In NetWare and OS/2 environments, queues are the primary software interface between the application and print device; users submit documents to a queue. In Windows 2000, however, the printer is that interface; the document is sent to a printer, not a queue.

quorum disk

The cluster disk on which configuration data is maintained in the quorum log, cluster database checkpoint, and resource checkpoints. The quorum disk is managed by the Quorum resource, which is usually a special kind of Physical Disk resource.

quorum log

The record, stored on the quorum disk, of changes that have been made to the cluster database of the registry since the last cluster database checkpoint was taken. Also known as the recovery log or change log.

Quorum resource

A quorum-capable resource (usually a Physical Disk resource) that has been configured to manage the quorum log and cluster database checkpoints, which comprise the configuration data necessary for recovery of the cluster.

quorum-capable resource

In a server cluster, a resource that can act as the cluster's Quorum resource. To be quorum-capable, a resource must provide shared storage and a means of persistent arbitration. The Cluster service defines only Physical Disk resources as quorum-capable.