49.What tools is used to manage Windows Server 2008 DNS server ?

What tools is used to manage Windows Server 2008 DNS server ?

The DNS snap in tool is used to add or remove zones and view the records in your DNS.

48. How to view or edit the tombstone life time in windows server

Click Start, point to Administrative Tools, and then click ADSI Edit.

In ADSI Edit, right-click ADSI Edit, and then click Connect to.

For Connection Point, click Select a well known Naming Context, and then click Configuration.

Double-click Configuration, CN=Configuration,DC=ForestRootDomainName, CN=Services, and CN=Windows NT.

Right-click CN=Directory Service, and then click Properties.

In the Attribute column, click tombstoneLifetime.

Tombstone lifetime value different from OS to OS, for windows server 2000/2003 it’s 60 days, In Windows Server 2003 SP1, default tombstone lifetime (TSL) value has increased from 60 days to 180 days, again in Windows Server 2003 R2 TSL value has been decreased to 60 days, Windows Server 2003 R2 SP2 and windows server 2008 it’s 180 days.

47. How to find unused system or computers from active directory network ?

How to find unused system or computers from active directory network ?

Using dsquery

command

dsquery  computers –inactive 8

(8 represents no of weeks)

46. Default replication time in Active directory

By default (KCC) knowledge consistency checker runs at 15 mins interval and replicates between domain controllers.

 There are two protocols used to replicate AD:

1. Remote Procedure Call (RPC) is used to replicate data and is always used for intrasite replication since it is required to support the FRS. RPC depends on IP (internet protocol).

2. Simple Mail Transfer Protocol (SMTP) may be used for replication between sites.

45. How to configure Global catalog server

Enabel or Disable Global catalog Server in a Domain controller

1. Click Start menu > Administrative Tools

2. Open Active Directory Sites & Services >

   Expand to server NTDS settings and right click properties

  Select the Global catalog  check box to enable it

 or 

Clear the Global catalog check box to diasble it.

44. How to copy file names in a folder to a text file

How to copy file names in a folder to a text file.

Command

dir /b > filename.txt

1. Open command prompt
2. Navigate to the concern folder
3. Enter the command
4. Output will be saved in the filename.txt file.

Example 

43.how to restrict user logon timing in windows domain

Go to > Active directory users and computers > select users > right click > click properties > select account > click logon hours > select logon permited and select timings and click ok.

42. SNTP in Active Directory

• Simple Network Time Protocol
• Automatically synchronizes clocks on machines that are members of Active Directory domains
• Synchronization hierarchy can be defined
• All times in Windows Server 2003 are stored as Universal Coordinated Time (UTC) and adjusted in the GUI for the time zone
• Time synchronization is not vital for Active Directory replication (differs from other directory services), but is crucial for Kerberos authentication

41. DHCP in Active Directory 2003

• Dynamic Host Configuration Protocol
• Used to provide computers with IP addressing configuration, such as
• DNS server address(es)
• DNS domain suffix
• Disabling of NetBIOS (Windows 2000 or later)
• Release IP address on shutdown (Windows 2000 or later)
• IPv4 and IPv6 configuration
• Custom-defined options

40. TCP/IP in Active Directory 2003

• Transmission Control Protocol/Internet Protocol
• Internet standard protocol
• Interoperable
• Robust
• Versions 4 and 6 supported in Microsoft® Windows® Server 2003
• Inherent component of Windows Server 2003 functionality
• Active Directory technologies use TCP/IP for communication and connectivity

39. What are the Active Directory Supported Technologies

Active Directory Supported Technologies

1. DNS
2. SNTP
3. DHCP
4. TCP/IP
5. X.509
6. Kerberos
7. LDIF
8. LDAP

38. Difference between server 2003 and server 2008 (2003 vs 2008)

Server 2003 vs. Server 2008.

1.    We can install windows 2008 server either in full version(install all services& applications) or server core(only install minimal required services), but in 2003 we can only install fully O.S.
2.    Windows server 2008 use Hyper-V application & Roles concept for better productivity but server 2003 does not have such features.
3.    Windows 2008 is a combination of vista and server 2003 r2.
4.    Some new services introduced in windows server 2008 are
a.    Read only domain controller (RODC)
b.    Windows Deployment server (WDS) instead of RIS server 2003
c.    Shadow copy of each and every folder.
d.    Boot sequence is changed
e.    Installation is faster in 2008 why because installation is 32 bit where as in 2003 is 16 bit as well 32.
f.    Services are known as role in it.
g.    Group policy editor is a separate option in Ads
h.    Main difference is Virtualization server 2008 has virtualization management.
i.    2008 has more inbuilt components and updated third party drivers.
j.    Introduced a new feature called Hyper-V (V for virtualization) only in 64 bit versions.
k.    Server 2008 is designed with number of new power saving features.  It includes updated support for Advanced Configuration and Power Interface (ACPI) processor power management (PPM) features, including support for processor performance states (P-states) and processor idle sleep states on multiprocessor systems. These features simplify power management in Windows Server 2008 (WS08) and can be managed easily across servers and clients using Group Policies.

37. TCP/IP in Active Directory

 TCP/IP in Active Directory

• Transmission Control Protocol/Internet Protocol
• Internet standard protocol
• Interoperable
• Robust
• Versions 4 and 6 supported in Microsoft® Windows® Server 2003
• Inherent component of Windows Server 2003 functionality
• Active Directory technologies use TCP/IP for communication and connectivity

36.What is the use of site?

What is the use of site?

Sites are primarily used to control replication traffic. Domain controllers within a site are pretty much free to replicate changes to the Active Directory database whenever changes are made. Domain controllers in different sites compress the replication traffic and operate based on a defined schedule, both of which are intended to cut down on network traffic.

More specifically, sites are used to control the following:

■ Workstation logon traffic

■ Replication traffic

■ Distributed File System (DFS)

Distributed File System (DFS) is a server component that provides a unified naming convention for folders and files stored on different servers on a network. DFS lets you create a single logical hierarchy for folders and files that is consistent on a network, regardless of where on the network those items are actually stored. Files represented in the DFS might be stored in multiple locations on the network, so it makes sense that Active Directory should be able to direct users to the closest physical location of the data they need. To this end, DFS uses site information to direct a client to the server that is hosting the requested data within the site. If DFS does not find a copy of the data within the same site as the client, DFS uses the site information in Active Directory to determine which file server that has DFS shared data is closest to the client.

■ File Replication Service (FRS)

Every domain controller has a built-in collection of folders named SYSVOL (for System Volume). The SYSVOL folders provide a default Active Directory location for files that must be replicated throughout a domain. You can use SYSVOL to replicate Group Policy Objects, startup and shutdown scripts, and logon and logoff scripts. A Windows Server 2003 service named File Replication Service (FRS) is responsible for replicating files in the SYSVOL folders between domain controllers. FRS uses site boundaries to govern the replication of items in the SYSVOL folders.

35.What is a site?

What is a site?

A Windows Server 2003 site is a group of domain controllers that exist on one or more IP subnets (see Lesson 3 for more on this) and are connected by a fast, reliable network connection. Fast means connections of at least 1Mbps. In other words, a site usually follows the boundaries of a local area network (LAN). If different LANs on the network are connected by a wide area network (WAN), you’ll likely create one site for each LAN.

 

34.What is trust relationship and how many types of trust relationship is there in exchange 2003?

What is trust relationship and how many types of trust relationship is there in exchange 2003?

Since domains represent security boundaries, special mechanisms called trust relationships allow objects in one domain (called the trusted domain) to access resources in another domain (called the trusting domain).

Windows Server 2003 supports six types of trust relationships:

■ Parent and child trusts

■ Tree-root trusts

■ External trusts

■ Shortcut trusts

■ Realm trusts

■ Forest trusts