devices independent of other partitions. Server Core Windows Server 2008 includes a variation of installation called Server Core. Server Core is a significantly scaled-back installation where no Windows Explorer shell is installed. It also lacks Internet Explorer, and many other non-essential features. All configuration and maintenance is done entirely through command-line interface windows, or by connecting to the machine remotely using Microsoft Management Console (MMC). Notepad and some Control Panel applets, such as Regional Settings, are available. A Server Core installation can be configured for several basic roles, including the domain controller (Active Directory Domain Services), Active Directory Lightweight Directory Services (formerly known as Active Directory Application Mode), DNS Server, DHCP server, file server, print server, Windows Media Server, Internet Information Services 7 web server and Hyper-V virtual server roles. Server Core can also be used to create a cluster with high availability using failover clustering or network load balancing. Andrew Mason, a program manager on the Windows Server team, noted that a primary motivation for producing a Server Core variant of Windows Server 2008 was to reduce the attack surface of the operating system, and that about 70% of the security vulnerabilities in Microsoft Windows from the prior five years would not have affected Server Core. Active Directory The Active Directory domain functionality that was retained from Windows Server 2003 was renamed to Active Directory Domain Services (ADDS). Active Directory Federation Services (ADFS) enables enterprises to share credentials with trusted partners and customers, allowing a consultant to use their company user name and password to log in on a client's network. Active Directory Lightweight Directory Services (AD LDS), (formerly Active Directory Application Mode, or ADAM) Active Directory Certificate Services (ADCS) allow administrators to manage user accounts and the digital certificates that allow them to access certain services and systems. Identity Integration Feature Pack is included as Active Directory Metadirectory Services. Active Directory Rights Management Services (ADRMS) Read-only domain controllers (RODCs), intended for use in branch office or other scenarios where a domain controller may reside in a low physical security environment. The RODC holds a non-writeable copy of Active Directory, and redirects all write attempts to a full domain controller. It replicates all accounts except sensitive ones. In RODC mode, credentials are not cached by default. Also, local administrators can be designated to log on to the machine to perform maintenance tasks without requiring administrative rights on the entire