No announcement yet.

AD questions and answers....

  • Filter
  • Time
  • Show
Clear All
new posts

  • AD questions and answers....

    some one plz help me with these questions and answers....

    {{{{{{{Technical Interview Questions – Active Directory
    What is Active Directory?
    What is LDAP?
    Can you connect Active Directory to other 3rd-party Directory Services? Name a few options.
    Where is the AD database held? What other folders are related to AD?
    What is the SYSVOL folder?
    Name the AD NCs and replication issues for each NC
    What are application partitions? When do I use them
    How do you create a new application partition
    How do you view replication properties for AD partitions and DCs?
    What is the Global Catalog?
    How do you view all the GCs in the forest?
    Why not make all DCs in a large forest as GCs?
    Trying to look at the Schema, how can I do that?
    What are the Support Tools? Why do I need them?
    What is LDP? What is REPLMON? What is ADSIEDIT? What is NETDOM? What is REPADMIN?
    What are sites? What are they used for?
    What's the difference between a site link's schedule and interval?
    What is the KCC?
    What is the ISTG? Who has that role by default?
    What are the requirements for installing AD on a new server?
    What can you do to promote a server to DC if you're in a remote location with slow WAN link?
    How can you forcibly remove AD from a server, and what do you do later? • Can I get user passwords from the AD database?
    What tool would I use to try to grab security related packets from the wire?
    Name some OU design considerations.
    What is tombstone lifetime attribute?
    What do you do to install a new Windows 2003 DC in a Windows 2000 AD?
    What do you do to install a new Windows 2003 R2 DC in a Windows 2003 AD?
    How would you find all users that have not logged on since last month?
    What are the DS* commands?
    What's the difference between LDIFDE and CSVDE? Usage considerations?
    What are the FSMO roles? Who has them by default? What happens when each one fails?
    What FSMO placement considerations do you know of?
    I want to look at the RID allocation table for a DC. What do I do?
    What's the difference between transferring a FSMO role and seizing one? Which one should you NOT seize? Why?
    How do you configure a "stand-by operation master" for any of the roles?
    How do you backup AD?
    How do you restore AD?
    How do you change the DS Restore admin password?
    Why can't you restore a DC that was backed up 4 months ago?
    What are GPOs?
    What is the order in which GPOs are applied?
    Name a few benefits of using GPMC.
    What are the GPC and the GPT? Where can I find them?
    What are GPO links? What special things can I do to them?
    What can I do to prevent inheritance from above?
    How can I override blocking of inheritance?
    How can you determine what GPO was and was not applied for a user? Name a few ways to do that.
    A user claims he did not receive a GPO, yet his user and computer accounts are in the right OU, and everyone else there gets the GPO. What will you look for?
    Name a few differences in Vista GPOs
    Name some GPO settings in the computer and user parts.
    What are administrative templates?
    What's the difference between software publishing and assigning?
    Can I deploy non-MSI software with GPO?
    You want to standardize the desktop environments (wallpaper, My Documents, Start menu, printers etc.) on the computers in one department. How would you do that? }}}}}}}}

  • #2
    Re: AD questions and answers....

    The idea is YOU research them and find out the answers yourself.
    They represent the knowledge of AD you will need for a sys-admin role

    If you are not confident with such questions, please dont apply!

    Oh, and please dont
    a) take large chunks of material from another post -- link to it instead
    b) post the same question numerous times -- once is enough
    c) keep hitting "submit reply" to get the same post in the same thread three times.

    First impressions count, but yours is struggling above zero!
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    IT Trainer / Consultant
    Ossian Ltd

    ** Remember to give credit where credit is due and leave reputation points where appropriate **


    • #3
      Re: AD questions and answers....

      this is too funny....
      • yes. novell is one...
      • %SystemRoot%\ntds\NTDS.DIT
      • The SYSVOL share contains some very important directories for your Windows 2000 domain. SYSVOL is also home for a part of Group Policy objects called the Group Policy Template, which isn't appropriate to store in Active Directory. Examples of SYSVOL share contents include software distribution files, scripts, ADM templates, and so on.
      • Schema NC is replicated to every other domain controller in the forest. Configuration NC is also replicated to every other DC in the forest. The Domain NC is replicated to every other DC within a single Active Directory domain; this is the most accessed portion of the AD dB.
      • Application directory partitions provide the ability to control the scope of replication and allow the placement of replicas in a manner more suitable for dynamic data. use them when you need to replicate without causing a huge impact on network performance and latency...
      To create a new application directory partition with its first replica, perform the following steps

      1. Bind to the namespace for the new partition, specifying the domain controller that will host the application directory partition in the ADsPath. For example, to create a partition with an ADsPath of "DC=dynamicdata,DC=mydomain,DC=com", the binding ADsPath would be "LDAP://<domain controller>/DC=mydomain,DC=com", where "<domain controller>" is the DNS name of the domain controller that will host the partition.

      The bind operation must specify the fast and delegation options. The fast option allows the bind to succeed even if the namespace does not exist. The delegation option is required to allow the domain controller to contact the Domain-Naming FSMO role holder using the same credentials.

      The system version of the domain controller must be Windows Server 2003 operating system and later.
      2. Create a domainDNS object with an appropriate name for the partition, for example, "DC=dynamicdata", to represent the naming context head for the new partition. The domainDNS object must have an instanceType attribute with a value of 5 (DS_INSTANCETYPE_IS_NC_HEAD | DS_INSTANCETYPE_NC_IS_WRITEABLE). The instanceType attribute can only be set at creation time because it is a system-only attribute.
      • AD Sites and Services
      • The global catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multidomain Active Directory forest. The global catalog is stored on domain controllers that have been designated as global catalog servers and is distributed through multimaster replication. Searches that are directed to the global catalog are faster because they do not involve referrals to different domain controllers.
      1. Open a CMD.EXE window.
      2. Type the following command and press Enter:
      nslookup gc._msdcs.%USERDNSDOMAIN%
      • because of the massive amount of replication traffic involved. there are other reasons as well.
      • ADSIedit is one method.
      • they are just that.. support tools. you need them to manage things like DNS, DHCP, ADUC, WINS, GPOs...
      • they are support tools, jackass.
      • sites? in what context?
      • Site links are logical, transitive connections between two or more sites.
      • the schedule determines when replication is allowed, interval is how often during an enabled schedule it will "kick off"
      • The Knowledge Consistency Checker (KCC) is a built-in process that runs on each domain controller and regenerates the replication topology for all directory partitions that are contained on that domain controller.
      • ISTG=Inter-Site Topology Generator. Initially, the first server in the site becomes the ISTG for the site, but this can change (and shouild) when a bridgehead is added.
      The following software and hardware requirements apply to a full installation or a Server Core installation of the Windows Server 2008 operating system:

      Install Windows Server 2008.

      Configure appropriate TCP/IP and Domain Name System (DNS) server addresses.

      The drives that store the database, log files, and SYSVOL folder for Active Directory Domain Services (AD DS) must be placed on a local fixed volume. SYSVOL must be placed on a volume that is formatted with the NTFS file system. For security purposes, the Active Directory database and log files should be placed on a volume that is formatted with NTFS.

      Traditionally, the Active Directory database and log files are placed on disk drives that are physically local to the domain controller computer. As an option, you can place the Active Directory database and log files on a nonlocal storage device if the device appears to be “local” to the GetDriveType function that Dcpromo.exe uses and it does not have advanced rollback, undo, or snapshot features enabled. For more information about the GetDriveType function, see GetDriveType Function (

      You must perform all backups and restores of AD DS, including rolling the contents of AD DS “back in time,” by using system state backups that are created by supported backup application programming interfaces (APIs) and methods.

      When you use an answer file to perform an unattended installation of AD DS, specify a [DCINSTALL] section in the answer file with appropriate parameters. For a list of entries for the [DCINSTALL] section of the answer file, see Appendix of Unattended Installation Parameters.

      Verify that Adprep.exe operations are complete. Before you can add AD DS to a server that is running Windows Server 2008 in an existing Active Directory environment, you must prepare the environment by running Adprep.exe. For more information about running Adprep.exe, see Scenarios for Installing AD DS.

      Verify that a DNS infrastructure is in place. Before you add AD DS to create a domain or forest, be sure that a DNS infrastructure is in place on your network. When you install AD DS, you can include DNS server installation, if it is needed. When you create a new domain, a DNS delegation is created automatically during the installation process.

      For information about configuring a Server Core installation, see Server Core Installation of Windows Server 2008 Step-By-Step Guide (

      i was gonna answer them all, but now im bored. so stop ripping pages from dP's shit and go to school... this is a great site, and if your serious you can get great help here. dont blow it... apologize to the forum and stop being 5 years old.

      its easier to beg forgiveness than ask permission.
      Give karma where karma is due...


      • #4
        Re: AD questions and answers....

        Thanks for the response, but he's already perm banned
        ** Remember to give credit where credit is due and leave reputation points where appropriate **


        • #5
          Re: AD questions and answers....

          You copied those from the cert exam