Windows Server 2008 Glossary - F

Applies To: Windows Server 2008

For more Windows Server terms, see either the Windows Server 2008 R2 Glossary or the Windows Server 2003 Glossary.

Glossary - F

# A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

failback

In a failover cluster or server cluster, the process of returning a clustered service or application to its preferred node after the node has failed and then come back online.

failback policy

A set of parameters that an administrator can set for a failover cluster or server cluster that affect failback operations.

failed

A state that applies to a resource or a node in a failover cluster or server cluster. A resource or a node is placed in the failed state after a specified number of unsuccessful attempts to bring it online.

failover

In a failover cluster or server cluster, the process of taking a clustered service or application offline on one node and bringing it back online on another node.

failover cluster

A group of computers, known as nodes, or terminal servers working together as a single system to ensure that mission-critical applications and resources remain available to clients.

Failover Cluster Management snap-in

A Microsoft Management Console snap-in (graphical user interface) through which you can configure a failover cluster and its nodes, its clustered services and applications, and its resources.

feature

A set of software functionality designed to solve a specific problem or to provide a new functionality to the user.

federated application

A Web-based application that is AD FS-enabled, meaning that it can be accessed by federated users.

federated user

A user whose account resides in an account partner organization and who can access federated applications that reside in a resource partner organization.

federation

A pair of realms or domains that have established a federation trust.

federation server

A computer that has been configured to host the Federation Service role service of Active Directory Federation Services (AD FS). Federation servers can authenticate or route requests from user accounts in other organizations and from clients that can be located anywhere on the Internet.

federation server proxy

A computer that has been configured to host the Federation Service Proxy component of Active Directory Federation Services (AD FS). Federation server proxies provide intermediary proxy services between an Internet client and a federation server that is located behind a firewall on the corporate network.

Federation Service

An installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server. When it is installed, the Federation Service provides tokens in response to requests for security tokens. Multiple federation servers can be configured to provide fault tolerance and load balancing for a single Federation Service.

Federation Service Proxy

An installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server proxy. When it is installed, the Federation Service Proxy role service uses WS-Federation Passive Requestor Profile (WS-F PRP) protocols to collect user credential information from browser clients and Web applications and send the information to the Federation Service on their behalf.

File and Registry Virtualization

A feature that allows standard users to run applications that normally write to per-computer files and registry keys. If these write operations fail, they are automatically redirected to equivalent per-user locations.

file/registry virtualization

A feature that allows standard users to run applications that normally write to per-computer files and registry keys. If these write operations fail, they are automatically redirected to equivalent per-user locations.

filtered access token

An access token with the least administrative privileges required for the session. It is a restricted access token where all elevated privileges have been filtered out. A filtered access token is created by default for all interactive users that are not standard users, except the built-in administrator.

filtered group

A local security group that is removed from an access token. When User Account Control (UAC) creates the filtered access token, the filtered groups are removed.

filtering

Application of a set of criteria that is applied to a data set so that only the entries that possess specific properties are displayed.

firewall

A security solution that segregates one portion of a network from another portion, allowing only authorized network traffic to pass through according to traffic filtering rules.

FS

An installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server. When it is installed, the Federation Service provides tokens in response to requests for security tokens. Multiple federation servers can be configured to provide fault tolerance and load balancing for a single Federation Service.

FSP

An installable role service of Active Directory Federation Services (AD FS) that is used to create a federation server proxy. When it is installed, the Federation Service Proxy role service uses WS-Federation Passive Requestor Profile (WS-F PRP) protocols to collect user credential information from browser clients and Web applications and send the information to the Federation Service on their behalf.

full access token

An access token with the maximum privileges authorized for the account. Used by User Account Control (UAC).

full privilege access token

An access token with the maximum privileges authorized for the account. Used by User Account Control (UAC).

full volume encryption key

The algorithm-specific key that is used to encrypt (and optionally, diffuse) data on disk sectors. Currently, this key can be either 128 bits or 256 bits advanced encryption standard (AES). The default encryption algorithm that BitLocker Drive Encryption uses is AES 128 bit with diffuser.