Endpoint Software and Security Glossary

March 31, 2026

Short definitions for Windows, endpoint security, software recovery, and technical operations terms.

On this page

Use this glossary for a quick distinction, then follow the linked reference when more context is needed.

High-value terms

Term	Meaning	Fast anchor
WinRE	Windows Recovery Environment for startup repair, restore, update rollback, and offline command work	broader recovery lane
UAC	elevation prompt and admin-approval boundary	not the same as full admin rights
BitLocker	full-volume encryption for data at rest	disk-level protection
EFS	file-level encryption inside Windows	narrower than BitLocker
restore point	saved system-state checkpoint used by System Restore	rollback helper, not full backup
Safe Mode	minimal-startup troubleshooting mode	fewer drivers and services
clean boot	selective startup used to isolate software conflicts	conflict-isolation lane
Group Policy	centralized Windows configuration and control framework	managed-setting lane
service	background process controlled by the OS	startup and runtime behavior
profile	user-specific settings and data	can break without the whole OS failing
least privilege	minimum required access for the task	default security instinct
quarantine	isolate the affected system or malicious content	contain before cleanup
MDM	mobile device management for enrollment and policy enforcement	remote policy lane
recovery key	unlock credential for encrypted storage like BitLocker or FileVault	recovery ownership

Pair	Keep this distinction clear
BitLocker vs EFS	full-volume encryption versus file-level encryption
restore point vs backup	system-state rollback helper versus broader recovery copy
Safe Mode vs clean boot	minimal startup environment versus selective startup for conflict isolation
WinRE vs Reset this PC	recovery toolkit versus more disruptive refresh or reinstall path
administrator rights vs effective permissions	broad role capability versus actual resulting access after all rules apply
local account vs domain account	device-local identity versus centrally managed identity
share permission vs NTFS	network share boundary versus filesystem boundary
malware remediation vs incident process	endpoint cleanup sequence versus broader organizational response

If you are choosing between…	Ask this first	Usually separate them by…
Safe Mode, WinRE, and Reset	am I isolating, repairing, or rebuilding?	scope of recovery and reversibility
BitLocker, EFS, and backup	am I protecting data, a file, or recovery capability?	encryption scope versus recoverability
local, Microsoft, and domain account	where does identity authority really live?	standalone, consumer-cloud, or centrally managed context
share, NTFS, and UAC	is the failure about path access, file access, or privilege elevation?	network boundary, filesystem boundary, or admin boundary

Topic family	What strong answers usually remember
permissions	access problems are boundary problems first
malware	contain first, then clean, then restore and educate
recovery	reversible supported fix before destructive reset
operations	verification and documentation are part of the fix
management	policy and enrollment matter more than random device tweaking

Topic	Reference page
commands, recovery order, and high-confusion troubleshooting pairs	Cheat Sheet
platform documentation and support references	Documentation
operating-system, security, software, and operations topics	Endpoint software and security reference

Revised on Friday, September 11, 2026