text:
SA: See security association (SA).
SAD: See security association database (SAD).
salt: An additional random quantity, specified as input to an encryption function, that is used to increase the strength of the encryption.
sanitized name: The form of a certification authority (CA) name that is used in file names (such as for a certificate revocation list (CRL); see [MSFT-CRL] for more information) and in other contexts where character sets are restricted. The process of sanitizing the CA name is necessary to remove characters that are illegal for file names, registry key names, or distinguished name (DN) values, or that are illegal for technology-specific reasons.
SASL: See Simple Authentication and Security Layer (SASL).
schedule: The frequency at which data replicates.
schema: The set of attributes and object classes that govern the creation and update of objects.
schema container: The root object of the schema naming context (schema NC).
schema naming context (schema NC): A specific type of naming context (NC) or an instance of that type. A forest has a single schema NC, which is replicated to each domain controller (DC) in the forest. No other NC replicas can contain these objects. Each attribute and class in the forest's schema is represented as a corresponding object in the forest'sschema NC.
schema object: An object that defines an attribute or an object class. Schema objects are contained in the schema naming context (schema NC).
scope of management (SOM): An Active Directorysite, domain, or organizational unit container. These containers contain user and computer accounts that can be managed through Group Policy. These SOMs are themselves associated with Group Policy Objects (GPOs), and the accounts within them are considered by the Group Policy Protocol [MS-GPOL] to inherit that association.
scoped Group Policy Object (GPO) distinguished name (DN): A Group Policy Object (GPO) distinguished name (DN) where the set of "CN=<cn>" elements is prepended with "CN=User" for the user policy mode of policy application and with "CN=Machine" for computer policy mode.
scoped Group Policy Object (GPO) path: A Group Policy Object (GPO) path appended with "\User" for the user policy mode of policy application, and "\Machine" for the computer policy mode.
screen coordinates: Coordinates relative to the top-left corner of the screen, which has the coordinates (0,0).
SCSI: See small computer system interface (SCSI).
SCSI logical unit number (LUN): See logical unit number (LUN).
SCSI port number: A number that uniquely identifies a port on a small computer system interface (SCSI) disk controller. Each SCSI disk controller may support multiple SCSI bus attachments or ports for connecting SCSI devices to a computer.
SCSI protocol: An architecture for SCSI, consisting of a group of standards created and maintained by the Technical Committee (T10) of the InterNational Committee on Information Technology Standards (INCITS).
SD: See security descriptor.
secret key: A symmetric encryption key shared by two entities, such as between a user and the domain controller (DC), with a long lifetime. A password is a common example of a secret key. When used in a context that implies Kerberos only, a principal's secret key.
secret object: An element of the Local Security Authority (LSA) Policy Database, which contains a value that is secret in that access to it is strictly controlled through cryptographic protections and restrictive access control mechanisms.
sector: The smallest addressable unit of a disk.
secure channel: An authenticated remote procedure call (RPC) connection between two machines in a domain with an established security context used for signing and encrypting RPC packets.
secure desktop: Only trusted processes running as SYSTEM are allowed to run on the secure desktop.
Secure/Multipurpose Internet Mail Extensions (S/MIME): A standard for encrypted and digitally signed electronic mail that allows users to send encrypted messages and authenticate received messages.
Secure Sockets Layer (SSL): A security protocol that supports confidentiality and integrity of messages in client and server applications that communicate over open networks. SSL uses two keys to encrypt data--a public key known to everyone and a private or secret key known only to the recipient of the message. SSL supports server and, optionally, client authentication using X.509 certificates (for more information, see [X509]). The SSL protocol is precursor to Transport Layer Security (TLS). The TLS version 1.0 specification is based on SSL version 3.0.
security account manager (SAM) built-in database: Microsoft-specific terminology for the part of the user account database that contains account information (such as account names and passwords) for accounts and groups that are pre-created at the database installation.
security association (SA): A simplex "connection" that provides security services to the traffic carried by it. See [RFC4301] for more information.
security association database (SAD): A database that contains parameters that are associated with each established (keyed) security association.
security context: An abstract data structure that contains authorization information for a particular security principal in the form of a Token/Authorization Context (see [MS-DTYP] section 2.5.2). A server uses the authorization information in a security context to check access to requested resources. A security context also contains a key identifier that associates mutually established cryptographic keys, along with other information needed to perform secure communication with another security principal.
security descriptor: A data structure containing the security information associated with a securable object. A security descriptor identifies an object's owner by its security identifier (SID).
If access control is configured for the object, its security descriptor contains a discretionary access control list (DACL) with SIDs for the security principals who are allowed or denied access. Applications use this structure to set and query an object's security status. The security descriptor is used to guard access to an object as well as to control which type of auditing takes place when the object is accessed.
security identifier (SID): An identifier for security principals in Windows that is used to identify an account or a group. Conceptually, the SID is composed of an account authority portion (typically a domain) and a smaller integer representing an identity relative to the account authority, termed the relative identifier (RID). The SID format is specified in [MS-DTYP] section 2.4.2; a string representation of SIDs is specified in [MS-DTYP] section 2.4.2 and [MS-AZOD] section 220.127.116.11.
security policy: In the form of a collection of security policy settings, the policy itself is an expression of administrative intent regarding how computers and resources on a network should be secured.
security policy database (SPD): A database that specifies the policies that determine the disposition of all IP traffic inbound or outbound from a host or security gateway.
security policy settings: Contained in security policies, the policy settings are the actual expression of how various security-related parameters on the computer are to be configured.
security principal: (1) A unique entity identifiable through cryptographic means by at least one key. A security principal often corresponds to a human user but can also be a service offering a resource to other security principals. Sometimes referred to simply as a "principal".
(2) An identity that can be used to regulate access to resources, as specified in [MS-AUTHSOD] section 184.108.40.206. A security principal can be a user, a computer, or a group that represents a set of users.
(3) A unique entity, also referred to as a principal, that can be authenticated by Active Directory. It frequently corresponds to a human user, but also can be a service that offers a resource to other security principals. Other security principals might be a group, which is a set of principals. Groups are supported by Active Directory.
security principal name (SPN): The name that identifies a security principal (for example, machinename$@domainname for a machine joined to a domain or username@domainname for a user). Domainname is resolved using the Domain Name System (DNS).
security principal object: An object that corresponds to a security principal. A security principal object contains an identifier, used by the system and applications to name the principal, and a secret that is shared only by the principal. In Active Directory, a security principal object has the objectSid attribute. In Active Directory, the user, computer, and group object classes are examples of security principalobject classes (though not every group object is a security principal object).
security protocol: A protocol that performs authentication and possibly additional security services on a network.
security provider: A pluggable security module that is specified by the protocol layer above remote procedure call (RPC), and will cause RPC to use this module to secure messages in a communication session with the server. Sometimes referred to as an authentication service. For more information, see [C706] and [MS-RPCE].
security support provider (SSP): A dynamic-link library (DLL) that implements the Security Support Provider Interface (SSPI) by making one or more security packages available to applications. Each security package provides mappings between an application's SSPI function calls and an actual security model's functions. Security packages support security protocols such as Kerberos authentication and NTLM.
Security Support Provider Interface (SSPI): A Windows-specific API implementation that provides the means for connected applications to call one of several security providers to establish authenticated connections and to exchange data securely over those connections. This is the Windows equivalent of Generic Security Services (GSS)-API, and the two families of APIs are on-the-wire compatible.
security token: (1) An opaque message or data packet produced by a Generic Security Services (GSS)-style authentication package and carried by the application protocol. The application has no visibility into the contents of the token.
(2) A collection of claims that represents a previously authenticated user as defined in the Mobile Device Enrollment Protocol [MS-MDE].
seed file or seed data: A file or files at the target location that are used to supply data for reconstructing the source file. Remote differential compression (RDC) may use an arbitrary number of seed files in the process of copying a single source file. The process of selecting seed files can be guided by using similarity traits. For more information, see [MS-RDC] section 184.108.40.206.2.
selective single master: A replication mode in which changes from only a single machine propagate to other machines.
self-signed certificate: A certificate that is signed by its creator and verified using the public key contained in it. Such certificates are also termed root certificates.
semisynchronous operation: An operation that is executed on the server side while the client is regularly checking to see if there is no response available from the server.
sequence ID: A monotonically increasing 8-bit identifier for packets. This is typically represented as a field named bSeq in packet structures.
serial storage architecture (SSA) bus: Serial storage architecture (SSA) is a standard for high-speed access to high-capacity disk storage. An SSA bus is implemented to the SSA standard.
serialize: The process of taking an in-memory data structure, flat or otherwise, and turning it into a flat stream of bytes. See also marshal.
server: (1) A computer on which the remote procedure call (RPC) server is executing.
(2) A replicating machine that sends replicated files to a partner (client). The term "server" refers to the machine acting in response to requests from partners that want to receive replicated files.
(3) A DirectPlay System application that is hosting a DirectPlay game session. In the context of DirectPlay 8, the term is reserved for hosts using client/server mode.
server-activated object (SAO): A server object that is created on demand in response to a client request. See also marshaled server object.
server authentication: A mode of authentication in which only the server in the transaction proves its identity.
server challenge: A 64-bit nonce generated on the server side.
server Group Policy Object (GPO) distinguished name (DN): A Group Policy Object (GPO) distinguished name (DN) that uses a specific server in the Lightweight Directory Access Protocol (LDAP) path syntax, as specified in [RFC2251], where the server name is a domain controller (DC) that is located as specified in [MS-NRPC] section 188.8.131.52.2.
server Group Policy Object (GPO) path: A Group Policy Object (GPO) path in which the Distributed File System (DFS) path contains a server name in the DFS path syntax and where the server name is a domain controller (DC).
server locator: Enables exporting of entries to the remote procedure call (RPC) name service.
Server Message Block (SMB): A protocol that is used to request file and print services from server systems over a network. The SMB protocol extends the CIFS protocol with additional security, file, and disk management support. For more information, see [MS-CIFS] and [MS-SMB].
Note Whenever SMB is indicated, SMB2 can also be included (unless otherwise stated).
server object: A class of object in the config NC. A server object can have an nTDSDSA object as a child.
server role: (1) The state of a domain controller (DC), which can be one of two values--primary DC or backup DC.
(2) Any of the services that can be provided by a host, including DHCP server, DNS server, Network Policy Server (NPS), and domain controllers.
server-scoped Group Policy Object (GPO) distinguished name (DN): A scoped Group Policy Object (GPO) distinguished name (DN) with a server name included in the path, as is the case for a server GPO DN.
server-scoped Group Policy Object (GPO) path: A Group Policy Object (GPO) path with a server name included in the path, as is the case for a server GPO path.
service: A process or agent that is available on the network, offering resources or services for clients. Examples of services include file servers, web servers, and so on.
service account: A stored set of attributes that represent a principal that provides a security context for services.
Service for User (S4U): Microsoft-specific extensions to the Kerberos protocol that allow a service to obtain a Kerberosservice ticket for a user that has not authenticated to the Key Distribution Center (KDC). S4U includes S4U2proxy and S4U2self.
Service for User to Proxy (S4U2proxy): An extension that allows a service to obtain a service ticket on behalf of a user to a different service.
Service for User to Self (S4U2self): An extension that allows a service to obtain a Kerberosservice ticket to itself. The service ticket contains the user's groups and can therefore be used in authorization decisions.
service principal: An entity that represents a service at the Key Distribution Center (KDC). The service principal has a name and an associated key. A subclass of principal, a service principal generally does not correspond to a human user of the system, but rather to an automated service providing a resource, such as a file server.
service principal name (SPN): The name by which a client uniquely identifies an instance of a service for mutual authentication. See [SPNNAMES] for more information about SPN format and composing a unique SPN. Also see [RFC1964] section 2.1.1.
service provider: A module that abstracts details of underlying transports for generic DirectPlay message transmission. Each DirectPlay message is transmitted by a DirectPlayservice provider. The service providers that shipped with DirectPlay 4 are modem, serial, IPX, and TCP/IP.
service (SRV) resource record: A Domain Name System (DNS) resource record used to identify computers that host specific services, as specified in [RFC2782]. SRV resource records are used to locate domain controllers (DCs) for Active Directory.
service set identifier (SSID): A sequence of characters that names a wireless local area network (WLAN).
service ticket: A ticket for any service other than the ticket-granting service (TGS). A service ticket serves only to classify a ticket as not a ticket-granting ticket (TGT) or cross-realm TGT, as specified in [RFC4120].
session: (1) In Kerberos, an active communication channel established through Kerberos that also has an associated cryptographic key, message counters, and other state.
(2) In Server Message Block (SMB), a persistent-state association between an SMB client and SMB server. A session is tied to the lifetime of the underlying NetBIOS or TCP connection.
(3) In the Challenge-Handshake Authentication Protocol (CHAP), a session is a lasting connection between a peer and an authenticator.
(4) In the Workstation service, an authenticated connection between two computers.
(5) An active communication channel established through NTLM, that also has an associated cryptographic key, message counters, and other state.
(6) In OleTx, a transport-level connection between a Transaction Manager and another Distributed Transaction participant over which multiplexed logical connections and messages flow. A session remains active so long as there are logical connections using it.
session key: A relatively short-lived symmetric key (a cryptographic key negotiated by the client and the server based on a shared secret). A session key's lifespan is bounded by the session to which it is associated. A session key should be strong enough to withstand cryptanalysis for the lifespan of the session.
session layer: The fifth layer in the Open Systems Interconnect (OSI) architectural model as defined by the International Organization for Standardization (ISO). The session layer is used for establishing a communication session, implementing security, and performing authentication. The session layer responds to service requests from the presentation layer and issues service requests to the transport layer.
Session Multiplex Protocol (SMUX): An entity on a network that implements the Secure Socket Tunneling Protocol (SSTP) and that listens for SSTP connections over TCP port 443.
session security: The provision of message integrity and/or confidentiality to a session.
SHA: See system health agent (SHA).
SHA-1 hash: A hashing algorithm as specified in [FIPS180-2] that was developed by the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA).
shadow copy: A duplicate of data held on a volume at a well-defined instant in time.
share: A resource offered by a Common Internet File System (CIFS) server for access by CIFS clients over the network. A share typically represents a directory tree and its included files (referred to commonly as a "disk share" or "file share") or a printer (a "print share"). If the information about the share is saved in persistent store (for example, Windows registry) and reloaded when a file server is restarted, then the share is referred to as a "sticky share". Some share names are reserved for specific functions and are referred to as special shares:
IPC$, reserved for interprocess communication.
ADMIN$, reserved for remote administration.
A$, B$, C$ (and other local disk names followed by a dollar sign), assigned to local disk devices.
share connect: The act of establishing authentication and shared state between a Common Internet File System (CIFS) server and client that allows a CIFS client to access a share offered by the CIFS server.
shell: Part of the Windows user interface (UI) that organizes and controls user access to a wide variety of objects necessary for running applications and managing the operating system. The most numerous are the folders and files that reside on computer storage media. There are also a number of virtual objects such as network printers and other computers. The shell organizes these objects into a hierarchical namespace and provides an API to access them.
shell link: A data object that contains information used to access another object in the shell's namespace--that is, any object visible through Windows Explorer. The types of objects that can be accessed through shell links include files, folders, disk drives, and printers. A shell link allows an application to access an object from anywhere in the namespace. The application does not need to know the current name and location of the object.
shell shortcut: A shell link that has a shortcut icon; however, the terms shell link and shell shortcut are often used interchangeably.
SHV: See system health validator (SHV).
SID: See security identifier.
signal: In OleTx, the act of communicating an event between facets inside a transaction manager.
signing certificates: The certificate that represents the identity of an entity (for example, a certification authority (CA), a web server or an S/MIME mail author) and is used to verify signatures made by the private key of that entity. For more information, see [RFC3280].
similarity data: Information about a file that can be used to determine an appropriate seed file to select to reduce the amount of data transferred. Similarity data consists of one or more similarity traits.
similarity trait: A trait that summarizes an independent feature of a file. The features are computed by taking min-wise independent hash functions of a file's signatures. For information about how traits are computed, see [MS-RDC] section 220.127.116.11. Similarity traits are used in selecting seed files.
Simple and Protected GSS-API Negotiation Mechanism (SPNEGO): An authentication mechanism that allows Generic Security Services (GSS) peers to determine whether their credentials support a common set of GSS-API security mechanisms, to negotiate different options within a given security mechanism or different options from several security mechanisms, to select a service, and to establish a security context among themselves using that service. SPNEGO is specified in [RFC4178].
Simple Authentication and Security Layer (SASL): The Simple Authentication and Security Layer, as specified in [RFC2222]. This is an authentication mechanism used by the Lightweight Directory Access Protocol (LDAP).
Simple Mail Transfer Protocol (SMTP): A TCP/IP protocol used in sending and receiving email.
simple volume: A volume whose data exists on a single partition.
single sign-on: A process that enables a user with a domain account to log on to a network once and gain access to all network resources.
single-instance storage (SIS): An NTFS feature that implements links with the semantics of copies for files stored on an NTFSvolume. SIS uses copy-on-close to implement the copy semantics of its links.
single-phase commit: An optimization of the Two-Phase Commit Protocol in which a transaction manager delegates the right to decide the outcome of a transaction to its only subordinate participant. This optimization can result in an In Doubt outcome.
single-valued claim: See the definition of claim.
site: An Active Directory term that defines a set of one or more TCP/IP subnets, where the subnets have high connectivity as measured in terms of latency (low) and bandwidth (high). By defining sites (represented by site objects) an administrator can easily configure Active Directory access and replication topology to take advantage of the physical network. When users log on, Active Directory clients find domain controllers (DCs) that are in the same site as the user or are near the same site if there is no DC in the site. For more information, see [MS-ADTS].
site coverage: The set of sites for which a domain controller (DC) is responsible, as configured by the administrator.
site distinguished name (DN): The distinguished name (DN) for an object in Active Directory that represents a site.
site object: An object of class site, representing a site.
site of domain controller (DC): The site object that is an ancestor of the DC's nTDSDSA object.
site settings object: For a given site with site object s, its site settings object o is the child of s such that o is of class nTDSSiteSettings and the relative distinguished name (RDN) of o is CN=NTDS site settings.
SKU: See Stock Keeping Unit (SKU).
slow sync: The nominator for a synchronization subprotocol that is used to perform a consistency check between the databases of two partners.
small computer system interface (SCSI): A set of standards for physically connecting and transferring data between computers and peripheral devices.
small computer system interface (SCSI) bus: A standard for connecting peripheral devices to a computer. A SCSI bus is an implementation of this standard.
smart card: A portable device that is shaped like a business card and is embedded with a memory chip and either a microprocessor or some non-programmable logic. Smart cards are often used as authenticationtokens and for secure key storage. Smart cards used for secure key storage have the ability to perform cryptographic operations with the stored key without allowing the key itself to be read or otherwise extracted from the card.
SMB connection: A transport connection between a Server Message Block (SMB) client and an SMB server. The SMB connection is assumed to provide reliable in-order message delivery semantics. An SMB connection can be established over any available SMB transport that is supported by both the SMB client and the SMB server, as specified in [MS-CIFS].
SMB dialect: There are several different versions and subversions of the Server Message Block (SMB) protocol. A particular version of the SMB protocol is referred to as an SMB dialect. Different SMB dialects can include both new SMB messages as well as changes to the fields and semantics of existing SMB messages used in other SMB dialects. When an SMB client connects to an SMB server, the client and server negotiate the SMB dialect to be used.
SMB session: An authenticated user connection established between an SMB client and an SMB server over an SMB connection. There can be multiple active SMB sessions over a single SMB connection. The Uid field in the SMB packet header distinguishes the various sessions.
SMTP: See Simple Mail Transfer Protocol (SMTP).
snapshot: The point in time at which a shadow copy of a volume is made.
SOAP: A lightweight protocol for exchanging structured information in a decentralized, distributed environment. SOAP uses XML technologies to define an extensible messaging framework, which provides a message construct that can be exchanged over a variety of underlying protocols. The framework has been designed to be independent of any particular programming model and other implementation-specific semantics. SOAP 1.2 supersedes SOAP 1.1.
SOAP 1.1: Version 1.1 of the SOAP (Simple Object Access Protocol) standard. For the complete definition of SOAP 1.1, see [SOAP1.1].
SOAP 1.2: Version 1.2 of the SOAP standard. Some examples of changes introduced in SOAP 1.2 include an updated envelope structure, as well as updates to the structure and semantics for SOAP faults. The binding framework was also updated to allow binding to non-HTTP transports. Starting with version 1.2, SOAP is no longer an acronym. See also SOAP. For the complete specification of SOAP 1.2, see [SOAP1.2-1/2007] and [SOAP1.2-2/2007].
SOAP action: The HTTP request header field used to indicate the intent of the SOAP request, using a URI value. See [SOAP1.1] section 6.1.1 for more information.
SOAP body: A container for the payload data being delivered by a SOAP message to its recipient. See [SOAP1.2-1/2007] section 5.3 for more information.
SOAP envelope: A container for SOAP message information and the root element of a SOAP document. See [SOAP1.2-1/2007] section 5.1 for more information.
SOAP fault: A container for error and status information within a SOAP message. See [SOAP1.2-1/2007] section 5.4 for more information.
SOAP fault code: The algorithmic mechanism for identifying a SOAP fault. See [SOAP1.2-1/2007] section 5.6 for more information.
SOAP fault detail: A string containing a human-readable explanation of a SOAP fault, which is not intended for algorithmic processing. See [SOAP1.2-1/2007] section 5.4.5 for more information.
SOAP header: A mechanism for implementing extensions to a SOAP message in a decentralized manner without prior agreement between the communicating parties. See [SOAP1.2-1/2007] section 5.2 for more information.
SOAP header block: The XML block containing the SOAP header entries within a SOAP header. See [SOAP1.2-1/2007] section 5.2.1 for more information.
SOAP message: An XML document consisting of a mandatory SOAP envelope, an optional SOAP header, and a mandatory SOAP body. See [SOAP1.2-1/2007] section 5 for more information.
SOAP mustUnderstand attribute: A global, Boolean attribute that is used to indicate whether a header entry is mandatory or optional for the recipient to process. See [SOAP1.2-1/2007] section 5.2.3 for more information.
software installation package: A file that describes other files and metadata necessary to describe an application's executable files and state and to install that application. Also referred to as a "package".
software installation package modification: A file that allows an administrator to specify configuration for an application that is installed on the client through a software installation package.
software maintenance utility: An application that allows users to perform software management activities such as installation, uninstallation, or inventory of applications available through the software installation extension.
software package container distinguished name (DN): A distinguished name (DN) of the form "CN=Packages,<ClassStore>" where <ClassStore> is a class store container DN.
software package distinguished name (DN): A distinguished name (DN) of the form "CN=<SoftwarePackageId>,CN=Packages,<ClassStore>", where <ClassStore> is a class store container DN and <SoftwarePackageId> is a curly braced GUID string string.
software scripts path: A file system path to a directory with a path of the form "<ScopedGPOPath>\Applications", where <ScopedGPOPath> is a scoped GPO path.
SoH: See statement of health (SoH).
SoHR: See statement of health response (SoHR).
source file or source data: A file on a source location that is to be copied by remote differential compression (RDC). Sometimes referred to as "source".
sparse file: A file that has regions of data containing all zeros and in which some of the zero regions do not have disk space allocated for them.
SPD: See security policy database.
SPN: See service principal name.
spool file: A representation of application content data than can be processed by a print driver. Common examples are enhanced metafile format and XML paper specification. For more information, see [MSDN-META] and [MSDN-XMLP].
SSL: See Secure Sockets Layer (SSL).
SSL/TLS handshake: The process of negotiating and establishing a connection protected by Secure Sockets Layer (SSL) or Transport Layer Security (TLS). For more information, see [SSL3] and [RFC2246].
staging file: The backup of the changed file or folder. It encapsulates the data and attributes associated with a replicated file or folder. By creating the staging file, File Replication Service (FRS) ensures that file data can be supplied to partners regardless of any activity that might prevent access to the original file. The staging files can be compressed to save disk space and network bandwidth during replication.
stamp: Information that describes an originating update by a domain controller (DC). The stamp is not the new data value; the stamp is information about the update that created the new data value. A stamp is often called metadata, because it is additional information that "talks about" the conventional data values. A stamp contains the following pieces of information: the unique identifier of the DC that made the originating update; a sequence number characterizing the order of this change relative to other changes made at the originating DC; a version number identifying the number of times the data value has been modified; and the time when the change occurred.
standalone CA: A certification authority (CA) that is not a member of a domain. For more information, see [MSFT-PKI].
standalone machine: A machine that is not a domain member or a domain controller (DC).
standard user: A user that does not have administrative rights defined in its token and is a member of the users group. Users are prevented from making accidental or intentional system-wide changes but can perform normal daily computer tasks.
state machine: A model of computing behavior composed of a specified number of states, transitions between those states, and actions to be taken. A state stores information about past transactions as it reflects input changes from the startup of the system to the present moment. A transition (such as connecting a network share) indicates a state change and is described by a condition that would need to be fulfilled to enable the transition. An action is a description of an activity that is to be performed at a given moment.
There are several action types:
Entry action: Performed when entering the state.
Exit action: Performed when exiting the state.
Input action: Performed based on the present state and input conditions.
Transition action: Performed when executing a certain state transition.
statement of health (SoH): A collection of data generated by a system health entity, as specified in [TNC-IF-TNCCSPBSoH], which defines the health state of a machine. The data is interpreted by a Health Policy Server, which determines whether the machine is healthy or unhealthy according to the policies defined by an administrator.
statement of health (SoH) client: A synonym for system health entity.
statement of health ReportEntry (SoH ReportEntry): A collection of data that represents a specific aspect of the health state of a client.
statement of health response (SoHR): A collection of data that represents the evaluation of the statement of health (SoH) according to network policies, as specified in [TNC-IF-TNCCSPBSoH].
statement of health response ReportEntry (SoHR ReportEntry): A collection of data that represents the evaluation of a specific aspect of the health state of a client, according to network policies.
station (STA): Any device that contains an IEEE 802.11 conformant medium access control and physical layer (PHY) interface to the wireless medium (WM).
station management entity (SME): In general, a station management entity (SME) is regarded as responsible for functions such as the gathering of layer-dependent status from the various layer management entities and setting the value of layer-specific parameters. An SME would typically perform such functions on behalf of general system management entities and would implement standard management protocols.
Stock Keeping Unit (SKU): A unique code that refers to a particular manufactured object or source of revenue. A SKU can refer to a retail product (software in a box that is sold through a channel), a subscription program (such as MSDN), or an online service (such as MSN).
stored procedure: A function/method that predefines a set of T-SQL commands that resides in a database server and is available to be called by client applications.
StoreMaster: The single agent responsible for performing certain updates to file-link information stored in VolumeTable and FileTable within an Active Directory Table (ADT). For more information on VolumeTable and FileTable, see [MSDLT].
stream: A sequence of bytes written to a file on the NTFS file system. Every file stored on a volume that uses the NTFS file system contains at least one stream, which is normally used to store the primary contents of the file. Additional streams within the file may be used to store file attributes, application parameters, or other information specific to that file. Every file has a default data stream, which is unnamed by default. That data stream, and any other data stream associated with a file, may optionally be named.
strict NDR/NDR64 data consistency check: A set of related rules for data validation during processing of an octet stream.
structural class: See structural object class.
structural object class: An object class that is not an 88 object class and can be instantiated to create a new object.
sub-authentication: Optional and additional authentication functionality, usually provided by extending an authentication algorithm.
sub-authentication package: An optional component that provides additional authentication functionality. If a sub-authentication package is installed, the authentication package calls the sub-authentication package before returning its authentication result. The request to verify by a sub-authentication package is indicated by the ParameterControl field of the LogonInformation parameter (see [MS-APDS] section 22.214.171.124.1, Verifying Responses with Sub-Authentication Packages).
subkey: A child node in the logical tree of the hierarchical data store.
subnet site: The association of a site with a particular client, based on the client's IP address.
subordinate transaction manager: A role taken by a transaction manager that is responsible for voting on the outcome of an atomic transaction. A subordinate transaction manager coordinates the voting and notification of its subordinate participants on behalf of its superior transaction manager. When communicating with those subordinate participants, the subordinate transaction manager acts in the role of superior transaction manager. The root transaction manager is never a subordinate transaction manager. A subordinate transaction manager has exactly one superior transaction manager.
SubRequest: A request within a SYNC_VOLUME or SEARCH request.
superclasses and subclasses: Types of Common Information Model (CIM) classes. A subclass is derived from a superclass. The subclasses inherit all features of its superclass but can add new features or redefine existing ones. A superclass is the CIM class from which a CIM class inherits.
superior transaction manager: A role taken by a transaction manager that is responsible for gathering outcome votes and providing the final transaction outcome. A root transaction manager can act as a superior transaction manager to a number of subordinate transaction managers. A transaction manager can act as both a subordinate transaction manager and a superior transaction manager on the same transaction.
symbolic link: A symbolic link is a reparse point that points to another file systemobject. The object being pointed to is called the target. Symbolic links are transparent to users; the links appear as normal files or directories, and can be acted upon by the user or application in exactly the same manner. Symbolic links can be created using the FSCTL_SET_REPARSE_POINT request as specified in [MS-FSCC] section 2.3.61. They can be deleted using the FSCTL_DELETE_REPARSE_POINT request as specified in [MS-FSCC] section 2.3.5. Implementing symbolic links is optional for a file system.
symmetric algorithm: A cryptographic algorithm that uses one secret key that may be shared between authorized parties. The key must be kept secret between communicating parties. The same key is used for both encryption and decryption. For an introduction to this concept and terminology, see [CRYPTO] section 1.5, [IEEE1363] section 3, and [SP800-56A] section 3.1.
symmetric encryption: An encryption method that uses the same cryptographic key to encrypt and decrypt a given message.
symmetric key: A secret key used with a cryptographic symmetric algorithm. The key needs to be known to all communicating parties. For an introduction to this concept, see [CRYPTO] section 1.5.
synchronous operation: An operation that is executed on the server side while the client is waiting for the response message.
syntax: See attribute syntax.
system access control list (SACL): An access control list (ACL) that controls the generation of audit messages for attempts to access a securable object. The ability to get or set an object's SACL is controlled by a privilege typically held only by system administrators.
system command: A message that is sent to a window or notification icon via its system menu, or via a keyboard shortcut. Common system commands include minimize, maximize, move, and so on.
system directory: A directory that contains system files comprising the operating system.
system health agent (SHA): The client components that make declarations on a specific aspect of the client health state and generate a statement of health ReportEntry (SoH ReportEntry).
system health entity: See system health agent (SHA).
system health validator (SHV): The server counterpart to the system health agent (SHA), which is responsible for verifying the declarations of client health state made by the respective SHA. The SHV generates a statement of health response ReportEntry (SoHR ReportEntry).
System menu: See window menu.
system partition: A partition that contains the boot loader needed to invoke the operating system on the boot partition. A system partition must also be an active partition. It can be, but is not required to be, the same partition as the boot partition.
system volume (SYSVOL): A shared directory that stores the server copy of the domain's public files that must be shared for common access and replication throughout a domain.


text:
How To Do Foundation Like A Pro
How many times have you drooled over the skin of your favourite actresses and models? Their skins always look so perfect and glowing that we wish to own them.
Not everyone is blessed with that glowing skin and a lot of work goes into perfecting the skin. Now you can also have the smooth skin of your dreams by using some simple pro-tips. I've looked around the web and have compiled some backstage tricks that will give you spotless complexion-
Pick your Best Match
Foundation should be tested on your jawline and that too in natural light. Never trust the store lighting. Apply a little, go out and check. The colour should match your complexion perfectly. The perfect shade of foundation will not be visible even if you do not blend it.
Clean and Prep
Clean skin is vital for flawless and long-lasting makeup. Cleanse your face properly and apply a moisturiser as per your skin type. Wait for 5 minutes and apply a primer. Primer is to be used when you want your makeup to last very long otherwise only foundation can do the job well. A primer is a must in case you have large pores as primer helps in shrinking them.
Pick your tool
Beauty blender is quite popular for an air-brushed foundation finish. You can use a sponge for heavy coverage and fingers will suffice if you need only light coverage. Another great way to apply foundation is to use a stippling brush. You are not supposed to swipe the brush or blender rather just tap it on face to get a natural flawless look. Start from the middle of face and blend outwards.
After you have perfected your foundation, apply concealer. To cover the under-eye darkness, take concealer on a pointed brush and apply on inner and outer corner of eyes. Then blend it towards the centre. This way your under eye darkness will be covered naturally and will never look fake. Apply concealer on all other areas that need coverage like sides of nose, blemishes and the area around the mouth. Here too use the stippling motions. Always pick a concealer that is just one shade lighter than your skin. Any lighter and it will look completely unnatural.
Generally the powder is applied to keep the skin matte but it doesn't mean that your face should look dull. Pick a luminous powder that will make your skin glow. You can try applying translucent powder starting from one side of your hairline, take it down to cheekbone and then up to the nose-bridge. Then continue to the other cheekbone and go up towards the other side of hairline. In simple words use a W motion.
A perfect base will enhance the rest of your makeup and will never make you look cake-y.
What are your favourite foundation tips?
You might like to read:-

subset: commoncrawl


text:
Berries Sweet Dish Dessert Glass Sweet Quark
License to use Creative Commons Zero - CC0. You are free to use for many purposes without worrying issues copyright because this picture is TRUE FREE. We just want you to back a referral link to Max Pixel (optional).
You can also exhort them by inviting our photographers one cup of Coffee. If it is so great, please share with your friends.
The image was tagged: Dessert, Glass, Sweet, Sweet Dish, Quark, Berries. Archives in the category "Food/Drink", it was made by Nikon D7200 camera with shoot mode: 70.0mm · ƒ/5.6 · 10/300s · ISO 200 ↯, gives a image excellent quality. The maximum size is 4800×3200 pixels, you can download it with JPEG format.
Our team would like to recommend to you a few photos in the same category:
|Image type
CC0 Public Domain
Free for commercial use
Link referral required
Link referral required


text:
Share pincode for faster delivery by local sellers.
This product is currently out of stock
Item is available at 122003Change
Item is not available at Change
You can place a return request within 10 days of order delivery.
In case of damaged/missing product or empty parcel, the return request should be filed within 2 days of delivery.
Elevate your style quotient this season by wearing these black coloured cotton trousers for men from Allen Cooper,a style essential for your wardrobe. Woven from corduroy fabric, these slim-fit trousers will give your look a required stylish edge. These classy trousers when paired with a white polo T-shirt will lend you a perfect semi-Casual look.


text:
Author: Lindsay Cummings
Genre: Young Adult, Dystopia
Expected Publication Date: May 26th, 2015
I've been meaning to buy and read The Murder Complex for so long now but I still haven't done it. I should just do it. Great pick!
My WOW!
~Stephanie @ Bookfever
I've thought about reading TMC before, but the repitition of "blood soaked" in the synopsis kind of turned me off. I like action, but I don't like gory. Can you tell me if it's really gory or just mostly action? Thanks! Here's my WOW. Happy Reading!ReplyDelete
I just asked a friend of mine, who also read it (and she's usually more into Romance books), and she says it's more action than gory. I remember there are a few "disturbing" scenes but overall she's probably right - a lot of action and twists. We both loved it a lot, so maybe just give it a try? Or try reading the novella "The Fear Trials" first - it's shorter and will probably give you a chance to decide better! :)
Thanks for stopping by! ♥
Thanks Yvonne! Thanks for visiting my blog too!Delete
I just added the murder complex to my goodreads TBR pile, but seeing lots of hype about the second book makes me want to just dive in!ReplyDelete
I want to read something by this author cause heard about her but can't decide which series to read first. The Balance Keepers is also there. Here is my WoW
P.S: New follower here!
I haven't read the Balance Keepers yet but I have an eye on it ... maybe I'll get it sometime. It's just that it's a children's book, so I don't really know but I only heard good about it and I KNOW that Lindsay can definitely write books! :D
Ohhh, thank you! I followed you back! ♥
Yeah that's what, I have only heard good things about her so I'll try to pick one soon and read. Thank you for doing that, I just saw it! :)Delete
Ohhh. This book! I'm desperately in need of reading this, whenever I'm in the "I need to read something gory" mood. I would think about picking this up, but I never do. PLUS that the author is insanely sweet and awesome :)
Great post! ♥
PS. what was your rating for The Murder Complex? I know you loved it from recent posts.
Ohhh, I think you'd like it! Especially if you're into gory and action stuff - it's so thrilling and good! I just checked and rated it with 5 stars :D Here's also my review, if you haven't read it yet/want to read it - http://thebookishpanda.blogspot.co.at/2014/11/review-murder-complex-by-lindsay.html
Ohh! Glad to hear you loved The Murder Complex! I haven't gotten around to reading it yet, hopefully I can get to it before The Death Code is released!
My WoW
Thank you for taking time to comment - you are awesome! I really appreciate it! ♥
Note: Only a member of this blog may post a comment.


text:
Randwick Golf Club is the perfect location for your next event. We have experience in Birthdays, Engagements, Baby Showers, Christenings, Weddings, Anniversaries, Networking, Corporate Days, Wakes, Christmas Parties, Home Comings… All kinds of Events.
When walking into our function rooms people cannot help but be amazed by Randwick Golf Club's unique Ocean and National Park views. Visits from Whales, Seals and Pods of Dolphins are a regular occurrence here. Our rooms can accommodate all sized functions from 50 people to 300 people.
Prices start at $39* per head.
Enquiries email@example.com
*wake menus $25 per head


text:
The Association offers ESOP programming nationally and through our network of local Chapters.
The Association publishes a monthly newsletter, an ESOP news blog, and expert publications.
An interactive learning module for ESOP participants.
Information about the concept and business mechanics of an ESOP including industry data.
Papers discussing a variety of legal, financial, and operational issues relating to ESOPs.
Accurate and timely information about employee ownership and ESOPs in the country today.
The Association plays a strong advocacy role in communities and cities across the country, and in our nation's capital.
Latest information on ESOPs and employee ownership news.
Download the Advocacy Kit.
The political action committee of The ESOP Association.
Every October, celebrating the incredible spirit of employee ownership.
A membership service to support internal and external communications of Association members.
A listing of specialized ESOP services offered by the Association's professional members.
A listing of ESOP Association company members by industry.
A directory of Association members alphabetically, geographically, by industry, and ESOP specialty.
Individuals interested in participating on ESOP company boards.
Connect with The ESOP Association: Blog, Facebook, LinkedIn, Flickr, YouTube.
Local ESOP educational programming and networking opportunities.
Locate ESOP companies and ESOP service providers in your local community.
Resources available to Chapter volunteer officers.
Leadership and staff of The ESOP Association.
Information on National ESOP Awards, AACE Awards, and Silver ESOP Awards.
Access the online application, available benefits and services, and a description of categories of membership.
Marketing opportunities to partner with The ESOP Association.
The ESOP Association provides members with several avenues to connect with individuals in the ESOP world.
The answers are in the ESOP Experts. The ESOP Experts is an easy-to-use, category-by-category listing of specialized services offered by Professional members of The ESOP Association.
The ESOP Yellow Pages is a listing of ESOP Association Corporate members and the products and services they offer, organized alphabetically under headings that generally conform to the U.S. Department of Commerce's Standard Industrial Code (SIC) numbers, supplied to The ESOP Association by the members listed. Each listing contains a brief description of the company's principal line(s) of business. For more information, contact each company via telephone, e-mail or website.
The ESOP Association Membership Directory is a listing of Association members alphabetically, geographically, by industry, and ESOP specialty. To access the Directory, you must login.
Connect with The ESOP Association: Twitter, Blog, LinkedIn, Flickr, YouTube.
1200 18th Street, NW
Suite 1125
Washington, DC 20036-2506
Phone: 202.293.2971
Toll Free: 1.866.366.3832
Fax: 202.293.7568
E-mail: email@example.com
Phone: 202.293.2971
E-mail: email@example.com


text:
On Monday, L wrote "God is Love" to practice her handwriting and reading. After we sounded out the words, we talked a bit about what it meant: that God is the Father, Son and Holy Spirit, three persons who love one another. And when we love one another, we are like God.
"When you are kind to your sister, and you love her, you are being like God."
"I do love, J."
Then we colored a picture of the icon of the Theotokos. L enjoys matching the colors to the icons; J reluctantly lets me guide her through one color before she runs away. I told them, "This is when Jesus was a baby. See how their cheeks are pressed together? They're hugging just like we do, because they love each other. Mary loves Jesus, and we should love God like Mary does."
This is big stuff for little ones. I never know how much of it they really get. L told me after our talk, "I love God, Mommy. I do." The girls kissed baby Jesus and pressed their cheek to Mary. Then they each gave me a hug, cheek to cheek, breaking my heart a little.
While attempting to say our morning prayers, L kept running away and did not want to venerate the icons. Finally I sat down with her and said, "Prayer time is important because we are spending time with God. We can't see God can we?" We looked around. "No. But we can see Jesus, because he became a man so that we could know God. That's why we kiss the icons: because we can see Jesus and it helps us remember that God is with us."
"How did God get in this world, Mommy?" (This is a favorite phrase, i.e. "are there any dinosaurs/monsters/zebras in this world?")
"Well, that's a special story," I told her, and I took her over to the icon of the Annunciation on my bedside table. She knows the story about the manger and the cave. It was just Christmas, after all. But this icon was in the room, so I showed it instead. "An angel came to Mary. She was a girl like you and me, but an angel came to her and said 'Rejoice, Mary! The Lord is with you.' And he told her that God was going to put a baby in her tummy, and it was Jesus. And Mary loved God, and so she was Jesus's mommy and God was his Father."
"Are there angels in this world?"
"Yes, but we can't see them either."
"But we can see them in the icons! And we can see Jesus in the icons."
"That's right!" And then she kissed Mary and the angel.
On Saturday, we met with Fr. James and our little mission for the Liturgy on the Saturday of Souls. During the service we remember the dead in prayer. I thought of the child I lost last year, Nicholas. He died unborn, thus unnamed in the service - but still he is remembered by God (and me).
After the service, Presbytera Eva gave me a necklace with a small pendant of the Theotokos and Jesus, pressing their cheeks together. She told me, "Jim (she called him) wanted you to have this because you have the children." Such love is heartbreaking. I thought of how the girls had struggled in my arms during the liturgy, and how I struggled to be patient. Then, I thought of Mary's love for God. I thought of Nicholas, whose cheek I had not touched. I thought of Jesus love for his mother.
And I resolved again to love. It isn't as easy at it sounds, and so each day we have to decide again.
Beloved, let us love one another, for love is of God; and everyone who loves is born of God and knows God. I John 4.7


text:
Affordability is Australia's most over-rated issue.
by Terry Ryder.
creator of hotspotting.com.au
Introduction: Affordability is Australia's most over-rated issue
The issue of affordability has become the biggest furphy in public debate in Australia.
It is a constant in daily media and it has become a favourite topic for posturing politicians.
Two very long and expensive federal inquiries have been held, allowing ambitious politicians to grandstand in front of television cameras – but nothing meaningful has changed. The Federal Government has targeted wealthy foreign investors have bought mansions in Sydney and Melbourne, apparently illegally, but that won't make a single house cheaper in the suburbs of our capital cities.
Major taxation policy is being framed by the big parties around this subject but none of it addresses the real issues, such as the reality that over 40% of the cost of a new house-and-land package is taxation. In other words, politicians themselves are the biggest problem but they are quick to point the finger of blame at unpopular minorities like foreign investors.
The bottom line in this issue is that Australia does not have the "affordability crisis" that is claimed almost daily in mainstream media. In all of our cities and throughout regional Australia, buyers can find affordable real estate.
In this report, I outline the truth about housing affordability across Australia and in each of our major markets – and suggest places buyers could consider to buy both affordability and well, from the viewpoint of future growth.
For analysis of markets nationwide, click on the topics below …
|National Overview
|How about some truth and rationality in the affordability debate.
|Adelaide & SA
|Plenty of very affordable options in Adelaide.
|Brisbane & QLD
|Brisbane most affordable areas are leading growth markets.
|Canberra & ACT
|The national capital is the Goldilocks of real estate.
|Darwin & NT
|Remoteness and scarcity has made Darwin expensive.
|Hobart & TAS
|Our cheapest city now underpinned by a growth economy.
|Melbourne & VIC
|Melbourne passes Sydney, but plenty of attainable options.
|Perth & WA
|Perth's decline will provide plenty of good buying options
|Sydney & NSW
|Sydney presents the toughest task when seeking cheaper options.
|Most Australians are comfortable with their mortgages.
National Overview
How about some truth and rationality in the affordability debate
If you regularly tune into mainstream media, you have every right to be confused about housing affordability. Coverage of real estate is awash with misinformation, but nowhere is the reportage more emotive, unbalanced, sensationalised and inaccurate that on the subject of affordability.
Media is addicted to the storyline that claims "the Great Australian Dream is dead". Journalists love to write that no one can afford to buy anymore. People and organisations that seek media attention can easily generate publicity by making sensational claims about affordability. If an organisation with a political objective publishes a report claiming we have the world's most unaffordable housing, media will accept it as truth and publish it without question.
The problem is exacerbated by this fact: much of our major media emanates from Sydney. Our largest and most expensive city recently had a three-year price boom, lifting median prices to $885,000 for houses and $665,000 for units. Some writers and commentators, in their efforts to sensationalise the issue, quote a Sydney median of "more than $1 million" and move from there to the claim that no one can afford to buy anymore – anywhere in Australia.
The truth is somewhat different. Here's the reality of housing affordability in Australia.
Two major affordability indexes are published quarterly, one by the Commonwealth Bank in association with the Housing Industry Association, and the other by Adelaide Bank in conjunction with the Real Estate Institute of Australia. Both find that, on average across Australia, affordability is at healthy levels – especially if you remove Sydney from the equation.
To keep matters simple, I'll refer to the CommBank affordability index (the other index makes similar findings). This finds that housing affordability is considerably better than it was five years ago, as an average across the nation.
There are three components to the affordability index: house prices, incomes and interest rates. Affordability generally has improved over the past five years because interest rates have fallen to record low levels, average incomes have risen gradually and, outside of Sydney and some parts of Melbourne, there has been only minor changes in house prices. In some major cities, including Perth and Darwin, prices have reduced – while in others, like Canberra, Hobart, Adelaide and Brisbane, there has been little in the way of house price rises.
Sydney-based journalists, economists and commentators appear to believe Australia has had a major national property boom – but, in reality, most of the 20 million Australians who live outside Sydney have not witnessed a property boom any time in the past five years.
Sydney, following three years of big price growth, is the only jurisdiction that doesn't have a demonstrably better affordability situation that it did in 2010. Everywhere else in Australia does. Even Sydney is marginally better off than in 2010. Many parts of Australia have a better affordability equation than 10 years ago.
There were improvements in 2015 in many parts of the nation. Jurisdictions which have a better affordability position now than 12 months ago include Perth (11% better than a year ago), Darwin (13.5% better), Hobart (7% better), regional WA (13% better), regional NSW, regional South Australia, regional Tasmania (6% better) and regional NT (10% better).
Affordability is essentially unchanged in Brisbane, regional Queensland and regional Victoria, compared to a year ago.
Sydney's position is 4.5% less favourable, Melbourne 7.6% less, Canberra's 9% less and Adelaide 2.6% less. But in each of those locations, affordability remains better than five years ago, even in Sydney (just).
An annual report titled Demographia claims Australia has the second most unaffordable housing in the world. The report, frankly, is rubbish. Indeed, I would go further and declare that report to be fraudulent.
Here's why. The report compares Australia to only seven other nations, therefore has no basis to make any claims about where Australia sits in the global pecking order. The report does not include anywhere in Europe or the Middle East. It completely ignores South America and Africa, and includes only a small number of Asian nations. There are almost 200 nations in the world but this report surveys only seven.
The report declares Sydney the second most unaffordable city for housing in the world but the survey does not include Paris, Monaco, Geneva, Zurich, Berlin, Frankfurt, Copenhagen, Amsterdam or Stockholm, all very expensive places for real estate.
Given that the report is not about how high prices are, but their relationship to incomes, it may well be the least affordable place in the world (relative to local incomes) is somewhere in Africa or Latin America. But no one has ever conducted a truly global study on housing affordability.
The report's sections on Australia uses 2015 prices but 2011 incomes, therefore the affordability calculation is based on the latest prices but incomes that are four years out of date.
Worst of all, the report sets the affordability bar so low that it finds all of Australia is unaffordable. And that is exactly what it sets out to achieve. The report is a political document from a developer lobby group which campaigns against government regulation of developer activity. It argues that regulating development makes its unaffordable.
To support this argument, it has decreed that anywhere with a median multiple above three is unaffordable. If the average income is $100,000 and the average house costs $300,000, that's a median multiple of 3. If the average income is $100,000 and the average house costs $400,000, that's a median multiple of 4.
The Demographia report says that anywhere with a median multiple of 3.1 is unaffordable. So if you live in Warrnambool in Victoria, where the median price is $320,000, and you earn $100,000 a year, you can't afford to buy the average Warrnambool house. It's unaffordable because the median multiple is 3.2. And yet anyone with that level of income would easily get a loan from any lender in Australia to buy a home for $320,000 and would have few problems with the monthly payments.
Yes, you're right, it's ludicrous. But media across Australia treated this as a credible research report and published headlines declaring we have the world's most unaffordable dwellings except for Hong Kong.
According to this report, the home I own is catastrophically unaffordable. At the time I bought it, the median multiple was around 6. Yet I readily got a loan and have been extremely comfortable with the repayments.
Like 75% of households with mortgages in Australia, I'm ahead on my repayments for that property. The average situation across the nation is two years ahead on mortgage repayments. Surveys indicate that even first-home buyers are very comfortable with their mortgages and most could cope with four interest rate rises (of 0.25% each) and still be comfortable.
Mortgage delinquencies (those behind on their repayments) are at record lows. I write more about that in the "Conclusion" at the end of this report.
Keep all of this in mind next time you read about "the housing affordability crisis".
Adelaide and South Australia
Plenty of very affordable options in Adelaide
The Housing Affordability Index has shown major improvement in Adelaide and South Australia over the past five years. This is despite a 1.7% decline in Adelaide in the past 12 months, caused primarily by a small decline in average weekly earnings and the increase in mortgage interest rates by major lenders in November.
Adelaide has the cheapest homes among the capital cities except for Hobart. The city's median house price is $440,000 while the median for apartments is $355,000. This means half of all houses sold are worth less than $440,000 and half of all apartments are below $355,000.
And around Adelaide there are plenty of affordable suburbs to fit most budgets. A number of them are precincts where sales momentum has been rising in the past 12 months or so, suggesting price growth will follow.
The leading precinct in the Adelaide metropolitan area in terms of rising sales activity is (as has often been the case in the past year or so) the Onkaparinga LGA is the far south. This area is benefiting from improvements to road and rail links – and has a number of appealing lifestyle elements, including seaside villages and a noted wine district.
Suburbs include Seaford, where the median house price is $345,000, while nearby Seaford Meadows is $370,000 and Seaford Rise is $390,000 (after a 9% rise in the past year).
Another growth precinct is the area encompassing the Salisbury and Playford LGAs in the far north of the metropolitan area. They include the Elizabeth suburbs (eight suburbs with Elizabeth in the name), many of which have median house prices below $200,000. The deareset of them has a median price of $240,000. Most of them have median rental yields between 6.3% and 7.1%.
Downmarket yes, but certainly affordable, with above average rental returns – and most of them have recorded price growth in the past year.
This precinct also includes the various Salisbury suburbs, where median house prices are generally in the mid-to-high $200,000s and yields are between 5.5% and 6.2%. And there's been solid price growth in the past year, including in Salisbury Downs (up 9%), Salisbury Park (up 8%) and Salisbury Heights (up 12%).
Another feature of Adelaide is the array of middle-market areas with good locations, character housing and attractive pricing. Many are nicely located in the precinct between the CBD and the beaches. They tend have homes prices in the $500,000s and $600,000s. Homes of that quality and location would be well above $1 million in both Melbourne and Sydney.
Outside of Adelaide, most of the key regional centres have cheap real estate. Median house prices include $230,000 in Murray Bridge, $240,000 in Mount Gambier, $320,000 in Victor Harbor, $280,000 in Whyalla (currently a depressed market to be avoided) and $310,000 in Port Lincoln.
Brisbane and Queensland
Brisbane most affordable precincts are the leading growth markets
If you're looking for affordable homes in the Brisbane metropolitan area, there are two pieces of good news. One, there are plenty of solid areas with affordable dwellings – and two, they're all leading areas in terms of rising sales activity, which means they're coming into a period of price growth.
The Brisbane market has had elevated activity for two years, without producing Sydney-style price growth across the board (although some pockets have had double-digit growth).
The improvement started in the inner-city and rippled out to the middle-ring suburbs both north and south of the Brisbane CBD. But in the past 12 months, the leading precinct for sales activity has been Logan City, in the far south of the metropolitan area.
Now the Moreton Bay Region in the far south is challenging Logan City for the No.1 spot. And Ipswich City in the far south-west has also put its hand up.
All three areas – the Logan, Moreton Bay and Ipswich municipalities – are good fits for one of the power combinations of real estate: affordability + infrastructure + jobs nodes = price growth.
Many of the suburbs in these precincts have median house prices in the $300,000s, with some in the $200,000s. Small units are in the $200,000s.
Logan City forms the urban bridge between Brisbane City and Gold Coast City. Three major motorways – the Pacific, Gateway and Logan motorways – intersect in Logan City and the commuter train link between Brisbane and the Gold Coast snakes through this municipality.
There are lots of major retail centres, including an Ikea Superstore, and plenty of jobs nodes. The major tourist theme parks including Dreamworld and Movieworld are just done the road.
The best places to consider are the older established suburbs with train stations and proximity to the motorways, retail centres, schools and jobs nodes – rather than new development areas inland, with no access to rail.
Moreton Bay Region is the northern mirror image of Logan City.
There are plenty of affordable apartments to be found throughout the Brisbane metropolitan area, but buyers need to avoid the inner-city market where vacancies are already high and destined to become much higher with high levels of new apartments under construction or being marketed off-the-plan. Most of being solid to distant investors, a clear signal to steer clear.
The Housing Affordability Index indicates that affordability has changed little in the past 12 months, either for Brisbane or for regional Queensland. And both are considerably better than they were five years ago.
There's plenty of good value buying in regional Queensland. One opportunity that stands out is the Cairns unit market, where prices have dropped in recent years because of oversupply and are now attractively priced, with yields often above 7% (the highest genuine rental yields available anywhere in Australia).
The Cairns market is on a growth path, thanks for major spending on infrastructure, efforts by local civic leaders to diversify the economy and a strong tourism industry. The low Australian dollar is bringing in lots of visitors from overseas.
Investors should keep on eye on markets that are currently in decline, either because of oversupply, or the decline in the resources sector, or the growing use of fly-in-fly-out resources workers staying in temporary accommodation camps, or some combination of those factors. There will come a time when those markets bottom and the buying will be good, with an eye to future growth.
Mackay and Gladstone both fall into this category. I'm not suggesting that now is the right time to buy there, but that some time in the next year or so, the bottom of the cycle will be reached and prices will be attractively low.
Those two cities both have strong futures, but investors need to remember that they will always be volatile markets, because of their links to the resources sector. People who value safety and low-risk should never buy in these kinds of markets.
Canberra and the ACT
The national capital is the Goldilocks of real estate
Canberra has never been a cheap city to buy property. Nor is it overly expensive. That's in keeping with its status long-term as the Goldilocks of capital city real estate – not too hot, not too cold, just right. It's a very even market, seldom producing major highs or lows.
There were price rises late in 2015 that caused affordability to drop, although it remains a lot better than five years ago.
But there is an evenness in the price of housing. For example, there are no suburbs with median house prices below $400,000 – unlike in Brisbane, Adelaide and Hobart, which provide plenty of options in the cheaper price brackets.
There are 20 suburbs where median house prices are currently between $400,000 and $500,000, 24 priced between $500,000 and $600,000 and 25 suburbs between $600,000 and $800,000, as well as 15 expensive suburbs with median house prices above $800,000.
Essentially, most of Canberra is middle market.
For cheaper real estate, you need to buy apartments. It's quite a weak market at the moment because there has been an oversupply of units in recent years and there has been a drop in sales volumes. The largest markets, Belconnen and Braddon, have recorded decreases in median prices in the past year.
If we examine the five-year growth averages of suburbs with apartment markets, many of them are in the negative – which means the current median unit price is lower than five years ago.
We can use Braddon as an example of the Canberra unit market. It's one of the biggest suburbs for unit sales, have recorded 206 transactions at a median price of $430,000 in the past year. The median dropped 1% in 2015 and declined an average of 1% per year over the past five years.
In Belconnen, currently the largest unit market with 210 sales in the past year at a median price of $390,000, the median dropped 3% in 2015 and growth in the past five years has averaged just 0.2% per year.
So generally speaking the Canberra market has been going nowhere in recent years, weighted down by over-building by developers, which coincided with a drop in demand because of downsizing of the federal public service.
The bulk of the apartment market has pricing in the $300,000 and $400,000 range. There are 28 with unit markets with median prices in the range. Another 22 suburbs have median prices between $400,000 and$500,000 and there are 11 suburbs with medians above $500,000.
It's all rather uninspiring, really, but that's Canberra for you.
Darwin and the Northern Territory
Remoteness, scarcity has made Darwin expensive, but affordability has improved
Darwin has been rather an expensive city, both for renting and for purchasing. But it's become a lot more affordable because of recent declines in both rents and prices.
In fact, Darwin has shown the biggest improvement in affordability in 2015, with a 13.5% gain, according to the Housing Affordability Index. There have otherwise been few major fluctuations in affordability over the past five years.
In regional Northern Territory, affordability improved 10% in 2015 and is noticeably better than five years ago. This means Alice Springs, Katherine and Tennant Creek, there being few other population centres of any size outside of those three.
Despite that recent improvement in affordability, there are few cheap housing markets in Darwin and the satellite city of Palmerston. There's nothing below $400,000 and just three suburbs between $400,000 and $500,000.
In this regard, Darwin is rather like Canberra. Most of the city is middle market. There are 18 suburbs with median house prices between $500,000 and $600,000 in the Darwin and Palmerston markets and several which are above $600,000.
You need to buy units to access anything reasonably cheap. The Darwin unit market has declined recently through oversupply (again, very similar to Canberra), but it's still quite an expensive market.
Of 24 Darwin area suburbs with unit markets, only five have median prices below $400,000. There are eight markets between $400,000 and $500,00 and 11 with median prices above $500,000.
Darwin City is the biggest unit market. It made 355 sales in 2015 at a median price of $505,000, which represented an annual decline of 6%. Over the past five years, the median price has decreased at the rate of 1.7% per year.
Despite persistent decline, the median price remains above $500,000, compared with $380,000 in the Perth CBD, $410,00 in the Adelaide CBD and $480,000 in the Brisbane CBD. Remoteness and a general shortage of development land tend to make Darwin expensive.
The cheapest unit market is Yarrawonga in the City of Palmerston, where last year there were 43 unit sales at a median price of $245,000.
If you sniff around websites like realestate.com.au, you can find units below $300,000, especially in the Palmerston area, but they are quite scarce. A lot more common are units in the low-to-mid $300,000s in that precinct – and that, in Darwin terms, is affordable.
Generally, Darwin is a market to watch because prices are falling, but longer-term this has been a strong growth market. Like all markets, it's going through a down phase. When it reaches bottom, the buying will be good (perhaps in the second half of 2016).
Hobart and Tasmania
Nation's cheapest capital city is now underpinned by a growth economy
Hobart has always been the cheapest of the capital cities but nobody has wanted to buy there because it was perceived as a place with no growth. Indeed, Hobart has been seen as the capital city of a basket case economy.
For many years that has been true. But it is true no longer. The Tasmanian economy is growing again. Indeed, it is leading the nation on some parameters.
There have been a series of national surveys and economic reviews which all agree on one thing: Tasmania is starting to pump. Here's what some of those reports have said:
- The Tasmanian economy is well and truly on the rise – Deloitte Access Economics.
- The renewed signs of job creation are pleasing – MyState.
- Business confidence is at +12 — three times higher than the next best states – NAB.
- Tasmania leads the nation on business confidence – Sensis.
- A falling jobless rate and a rising participation rate suggest the fundamentals are improving – NAB.
A number of economic sectors are now travelling strongly in Tasmania, including tourism, agriculture, manufacturing, forestry and construction. The lower Australian dollar has helped a number of those sectors, especially tourism, and there has been proactive action from the State Government to regenerate the economy.
This flows through into demand for real estate.
Home sales across Tasmania were up 12% in 2015. This was the third consecutive year of growing sales volumes – but still 40% blow the levels of the 2003/2004 boom.
The average sale price in 2015 in $309,000 shows how affordable Tasmania is. The Hobart median house price is $330,000, which means half of all sales are below that price.
In many ways, the steady improvement in Tasmanian real estate markets feels similar to 2003, the last time there was a genuine national property boom. Back then, the boom in the mainland cities rippled across Bass Strait, with investors noticing how cheap Tasmanian real estate was and how attractively high the rental yields were.
There are similar possibilities now. Sydney and, to a lesser degree, Melbourne (which is well connected to Tasmania, including with the major ferry services) have had strong price growth – and investors finding the big city values too rich may look at Hobart.
They will notice that not only are prices half those big city levels, but that Hobart has the highest rental yields among the state and territory capital cities, having overtaken Darwin in that regard.
There are plenty of suburbs in Hobart with median house prices in the $200,000s, on both side of the River Derwent.
One of the best affordable precincts in the Glenorchy LGA, which encompasses the cheaper suburbs north of the CBD. They include suburbs like Moonah (median house price $275,000), Glenorchy ($235,000), Goodwood ($205,000) and Montrose ($245,000).
Tasmania's second city Launceston also has an improving market, with most of its suburbs having median house prices in the $200,000s and $300,000s.
Melbourne and Victoria
Melbourne has overtaken Sydney, but has plenty of attainable options
I predicted in a number of reports in October and November that Melbourne was poised to overtake Sydney as the leading city on price growth early in 2016. Price statistics published in February confirmed that Melbourne was now No.1 in terms of the annual rate of growth in median house prices.
Sydney spent most of 2015 steadily fading, while Melbourne remained buoyant. I expect Melbourne to have another good year in 2016, although I expect the market to peak some time in the first half of the year. It depends on how you measure these things – in terms of sales activity, I think Melbourne has peaked already, but in terms of prices (which lag market activity by about six months) the peak should happen some time towards the middle of 2016.
It's clear that the Top End of the market, the auction frenzy suburbs, have lost much of their spark but there remains plenty of life in the Middle Ring and Outer Ring suburbs.
And this is the good thing about Melbourne for those looking for affordable options. Melbourne has plenty of solid precincts with attainable prices – and the city is at that stage of the cycle when those areas are the ones with rising momentum, leading to near-term price growth.
Those more affordable precincts include the LGAs of Casey in the far south-east, Whittlesea and Hume in the north, Brimbank in the west and Wyndham in the far south-west. Those precincts all have strong impetus in their markets and large numbers of suburbs with rising sales trajectories.
Casey is now equal first in Melbourne for the number of growth suburbs, challenging middle-market areas like the Whitehorse LGA which has dominated the charts for the past year or so. Like so many of the cheaper areas of our major cities, Casey's appeal is all about affordability, good infrastructure and proximity to jobs nodes. Down in that part of Melbourne there are good road and rail links, major medical and educational facilities, and significant employment precincts.
The various Cranbourne suburbs have median house prices in the $300,000s or low $400,000s.
In terms of jobs nodes, there's nowhere better in Melbourne than the northern suburbs, which include the municipalities of Whittlesea and Hume. Major companies that have big warehousing and logistics needs want to be where the major road links are good, so many are focused in the north close to the ring road where they can head north, west and east easily. Melbourne's fruit and vegetable markets moved up there recently as well.
So there are lots of jobs, good amenities and facilities, and plenty of affordable suburbs where houses are typically in the $400,000s and unit and townhouses in the $300,000s.
The Brimbank LGA in the western suburbs is one of the precincts most heavily impacted by infrastructure, which is one of real estate's most influential factors. The precinct based on the suburb of Sunshine has two university campuses, a major public hospital, plans for a new private hospital and the new $800 million transport hub for buses and trains.
Urban renewal forces are sweeping through that area, with former industrial land being reinvented as modern residential. This previously stigmatised area is being reborn.
Outside of Melbourne there are many affordable options in solid regional cities. The City of Greater Geelong has by far the strongest market at the moment and provides an affordable lifestyle alternative to Melbourne, to which it is now better connected following completion of the $5 billion Regional Rail Link. The process of Geelong's evolution – from a blue collar factory economy to a white collar one with education, health and IT the leading employment sectors – is continuing to gather pace.
Bendigo and Ballarat are both substantial regional cities with diverse economies, good links to the capital city and plenty of real estate priced below $300,000.
Other places worth considering for affordability and solid growth prospects include Warrnambool, Mildura, Shepparton, Traralgon and Sale.
Perth and Western Australia
Perth's decline will provide plenty of good buying options
As I have noted in previous editions of this report, most investors don't take action until they read or hear that there's a boom happening somewhere. The smart ones, and they're quite rare, buy when markets are down in areas where their research shows there will be recovery and growth in the near future. They buy when markets are down because there are plenty of homes for sale, but few buyers, so they can negotiate from a position of strength.
Perth is a good example of the opportunities to buy well for future gains. Its market peaked in 2012, having been boosted by a strong resources economy, and is now over three years into its down phase. I would expect this market to touch bottom some time in 2016, probably in the second half of the year.
In terms of the Housing Affordability Index, Perth and WA have made some of the biggest gains in the nation in the past 12 months. In 2015, Perth's affordability index improved 11%, while regional WA improved 14%, thanks to price decline in major markets.
Compared to 2010, affordability is significantly better now in both Perth and WA.
As with the other cities, buyers on a budget should target areas that not only offer cheaper homes but also good infrastructure, especially transport links, and proximity to jobs nodes. Perth has a number of precincts that fulfill those criteria well.
Rockingham City in the far south-west is a good example. It's a collection of bayside suburbs, with good road and rail links north and south, a number of big employment nodes in the area – with houses typically in the $400,000s and units in the $300,000s.
The suburb of Rockingham, which is undergoing a process of renewal and gentrification, is typical. The median house price is $440,000 and the median unit price is $305,000.
Other areas that offer plenty to buyers on a budget include the LGAs of Gosnells in the south-east, Armadale in the far south-east and Wanneroo in the far north.
There's also plenty to like about the City of Swan in the north-east – some of its suburbs are in the affordable category and others not.
One to consider because of a major piece of planned infrastructure is the suburb of Forrestfield, which is to be linked to the airport and beyond to the CBD via a new rail link. Houses there are typically in the low $400,000s. Rail links to an area that previously lacked them can be a game changer.
Outside the capital city, the resources towns in the north are still places to avoid. Even though prices have dropped a lot in towns like Port Hedland, Karratha and Newman, values are still too high. Over the past three years, $450,000 has been cut from the value of the typical house in Port Hedland – but it's too far too expensive at $750,000. Yes, the median price used to be $1.2 million in this crazy town.
But there is good value for money in some of the lifestyle centres south of Perth. Mandurah, Busselton and Margaret River all have solid markets with affordable options. So too does the industrial city of Bunbury.
Sydney and New South Wales
Sydney presents the toughest task for those seeking cheaper options
It would surprise many to learn that Sydney's affordability index today is better than it was five years ago. Only marginally so, but better nevertheless. Obviously it has deteriorated in the past 12 months and over the past three years, thanks for steady price rises across the city. But, compared to 2010, affordability is better today, despite the recent decline.
Why is it so? Firstly because prior to 2013, Sydney had has 10 years with very little price growth. Sydney prices weren't doing much in 2010, 2011 or 2012, before the boom started. Meanwhile, over the past five years average incomes have risen and interest rates have dropped considerably, despite recent increases by the major banks.
Sydney's affordability index generally improved in 2011 and 2012. It started to deteriorate gradually as prices began to rise in 2013 and has been trending downwards ever since. But still not to the levels of 2010.
It's been a different story in regional New South Wales. Yes, there is a NSW outside Sydney, although journalists don't appear to realise it. Since 2010, the affordability index in regional NSW has steadily improved. Overall, affordability improved 1.4% in 2015 and is considerably better than five years ago. With a couple of exceptions, regional NSW has not replicated the price growth experienced in the state capital.
There is some evidence from ABS data of a trend of Sydney residents moving to regional areas to access a cheaper and less hectic lifestyle. There are many strong regional cities and towns in NSW where the pace of life is slower, homes are much cheaper and there are good economic prospects. It's not compulsory to live in Sydney.
Meanwhile, in Sydney, as we have observed in previous reports, the boom is over and we expect price growth to be moderate or muted in 2016. We do not, however, expect any significant decline in prices. So overall affordability won't change much this year.
One of the ways media misleads consumers about Sydney prices is that they're addicted to the storyline that "the Great Australian Dream is dead" and that kids can't afford to buy anymore. To support that pre-conceived headline, they always quote the median house price, often inaccurately, and ignore apartments. This is a considerable oversight, given that so many Sydney residents live in units and townhouses.
So, while the median house price for Sydney is $885,000, according to CoreLogic, the median unit price is $655,000 – which means half of all sales are for lower figures.
Affordability is about the relationship between prices and incomes, with interest rates also part of the equation. Sydney has the highest prices in Australia but incomes are also high – so sufficient numbers of buyers have been able to afford its prices to generate three years of elevated activity and record prices.
But for those on a budget, looking to buy in the $300,000s, $400,000s and $500,000s, Sydney now presents a difficult proposition. Essentially it becomes an exercise to find affordable apartments in good locations.
Blacktown is one of the standout markets of Sydney. Last year it was No.1 in Sydney and NSW for growth in land values. Many of the suburbs of Blacktown City recorded growth above 20% in median house prices. Suburbs that three years were in the high $300,000s or low $400,000s are now above $600,000.
But units are a lot more affordable. In the past 12 months, there were 225 unit sales in the suburb of Blacktown at a median price of $425,000, with rental yields close to 5%.
Blacktown is part of one of nation's growth economies, that of Western Sydney. Penrith is also part of this rising economic force – and in the suburb of Penrith the median unit price is $355,000.
One of Sydney's leading suburban markets for units is Liverpool, a regional centre within the Sydney metropolitan area, with major services and amenities on offer, including good transport links to other parts of the metropolis. In the past 12 months there were 420 unit sales at a median price of $385,000, with rental yields around 5%.
A little closer to the centre of the city, Westmead is a standout market because of its strong precinct of university and medical facilities. It has good transport connections and they will become better when the $15 billion WestConnex project happens. In the meantime, this area is strongly targeted by young buyers for its well-located and well-connected units. After 280 sales last year, the median price rose 17% to $550,000.
Sydney is a big city with over 700 suburbs. Anyone who takes the time will find locations that present affordable options, relative to Sydney prices overall. But they won't be beside beaches or overlooking water.
There's a lot to NSW outside Sydney, including Newcastle which is a bigger city than some of our capital cities. It has a strong economy, which includes a major export port and a RAAF Base targeted for a $1 billion expansion. Its links to Sydney are regularly the focus of big-picture planning, including recent ideas about a high-speed rail link.
Newcastle has lots of good real estate – elevated suburbs with ocean views – and plenty of affordable suburbs.
Right throughout the state there are strong regional centres with good economies and property markets that show steady growth. They include Dubbo, Orange, Wollongong, Albury, Wagga Wagga, Tamworth, Lismore, Port Macquarie, Tweed Heads, Ballina, Wyong, Gosford …. the list goes on and on.
Port Macquarie has been a steadily rising market for the past 12-18 months. Median prices are $430,000 for houses and $305,000 for apartments.
Dubbo is another standout – a strategically located and growing regional centre with a diverse economy, good infrastructure, transport links that include road, rail and air, multiple growth factors, and houses priced typically in the low $300,000s.
Most Australians are comfortable with their mortgages
Next time someone tells you that Australia is a country with an affordability crisis and households suffering from mortgage stress, refer them to the official figures on mortgage delinquencies, which means people behind on their repayments.
Mortgage delinquencies are currently 0.9%, according to Fitch Ratings. In other words, less than 1% of households with mortgages are behind on their repayments. Those who are 90 days behind are only 0.4% of the total.
Fitch analyst James Zanesi says that not only is this a record low for Australia, but it's exceptionally low compared to other countries.
Other research has found that 75% of households with mortgages are ahead on their repayments. The average situation is two years ahead.
A recent survey of Australians who had recently bought homes as first-home buyers found that the vast majority felt very comfortable with their repayments. Indeed, most said they could deal with up to four interest rate rises (assuming rises of 0.25 percentage points) and still be comfortable making their repayments.
That makes sense because lenders assess borrowers' ability to make repayments assuming that interest rates are 2 or 3 percentage points higher than current levels.
Media doesn't give a great deal of prominence to his kind of research. It prefers fraudulent documents like the Demographia report, which claims that all of Australia is unaffordable.