answersLogoWhite

0

Active Directory

Active Directory is a set of networking services made by Microsoft. Questions about using and configuring Active Directory belong here.

849 Questions

What causes a PC in a Windows active directory domain to lose it's trust relationship they show as being a domain member but can't log into them with a domain account?

There might be different reasons but one of them is that the clocks between a workstation is a DC are not syncronised. I believe Windows allow not more than 1 minute difference

What are the major advantages of working in a domain model?

Advantage of Doamin Enviroment 1.Data Cetertralization 2.Security 3.Effictive Permission 4.Single Platform to manngae whole network 5.User can login to any computer and access their rsourses any time and much more

How do you open ssl0.9.7a dav2 server at downloadregistrysmartcom port 80?

This is something that needs to be fixed / changed on the site's server, not your computer. There is nothing wrong with your computer; there is something wrong with the site you are visiting.

What bridgehead server in Active Directory?

The bridgehead server is a domain controller that has been either administratively assigned or automatically chosen to replicate changes collected from other domain controllers in the site to bridgehead servers in other sites.

How many types of Domain controller?

The domain controller is only of one type but it can have different roles

Domain Naming master

RID master

PDC

Schema Master

Infrastructure master

Schema master (forest wide):

The Schema Master controls all updates to the Schema within the forest.

Domain Naming Master (forest wide):

The Domain Naming Master role is responsible for the creation and deletion of domains in the forest.

PDC Emulator (domain wide):

The PDC emulator role provides backwards compatability for Windows NT backup domain controllers (BDCs), the PDC emulator advertises itself as the primary domain controller for the domain. It also acts as the domain master browser and maintains the latest password for all users within the domain.

Infrastructure Master (domain wide):

The Infrastructure Manager role is responsible for updating references from objects within its domain with objects in other domains.

RID Master (domain wide):

The RID Master manages the Security Identifier (SID) for every object within the

Can a user defined in active directory access a shared drive if that user is not part of the domain?

No a user defined in active directory cannot access a shared drive if they are not part of the domain. You will need to set them up as a user on your computer.

What intersite replication uses what kind of traffic to reduce the impact to bandwidth on corporate WAN links?

Active Directory replication uses compressed and encrypted traffic to reduce the impact on corporate WAN links. This helps in minimizing bandwidth usage and ensuring efficient communication between domain controllers.

What are requirement to install ad on a new server?

· An NTFS partition with enough free space (250MB minimum)

· An Administrator's username and password

· The correct operating system version

· A NIC

· Properly configured TCP/IP (IP address, subnet mask and - optional - default gateway)

· A network connection (to a hub or to another computer via a crossover cable)

· An operational DNS server (which can be installed on the DC itself)

· A Domain name that you want to use

· The Windows 2000 or Windows Server 2003 CD media (or at least the i386 folder)

From the Petri IT Knowledge base. For more info, follow this link:

http://www.petri.co.il/active_directory_installation_requirements.htm
· An NTFS partition with enough free space (250MB minimum) · An Administrator's username and password · The correct operating system version · A NIC · Properly configured TCP/IP (IP address, subnet mask and - optional - default gateway) · A network connection (to a hub or to another computer via a crossover cable) · An operational DNS server (which can be installed on the DC itself) · A Domain name that you want to use · The Windows 2000 or Windows Server 2003 CD media (or at least the i386 folder) From the Petri IT Knowledge base. For more info, follow this link: http://www.petri.co.il/active_directory_installation_requirements.htm

What type of a domain group is most like the local group on a member server?

This the answer straight from the book:

Domain local groups in a Windows Server 2003 mixed or interim domain are limited

to the domain controller on which they reside. This is very similar to the way local

groups on a member server are limited to the computers on which they reside.

Unless the domain functional level is raised to Windows 2000 native or Windows

Server 2003, the domain local groups cannot be used for permission assignment

on any servers in the domain other than the domain controllers.

Are the SRV records of a child domain updated automatically during Active Directory installation?

After running DCPROMO, A text file containing the appropriate DNS resource records for the domain controller is created. The file called Netlogon.dns is created in the %systemroot%\System32\config folder and contains all the records needed to register the resource records of the domain controller.

Netlogon.dns is used by the Windows 2000 NetLogon service and to support Active Directory for non-Windows 2000 DNS servers.

If you are using a DNS server that supports the SRV resource record but does not support dynamic updates (such as a UNIX-based DNS server or a Windows NT Server 4.0 DNS server), you can import the records in Netlogon.dns into the appropriate primary zone file to manually configure the primary zone on that server to support Active Directory.

so if you are using w2k with dynamic update it will automatically create the SRV

Where the global catalog available?

The global catalog contains a complete replica of all objects in Active Directory for its Host domain, and contains a partial replica of all objects in Active Directory for every other domain in the forest. The global catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multidomain Active Directory forest. The global catalog is stored on domain controllers that have been designated as global catalog servers and is distributed through multimaster replication. Searches that are directed to the global catalog are faster because they do not involve referrals to different domain controllers. In addition to configuration and schema directory partition replicas, every domain controller in a Windows 2000 Server or Windows Server 2003 forest stores a full, writable replica of a single domain directory partition. Therefore, a domain controller can locate only the objects in its domain. Locating an object in a different domain would require the user or application to provide the domain of the requested object. The global catalog provides the ability to locate objects from any domain without having to know the domain name. A global catalog server is a domain controller that, in addition to its full, writable domain directory partition replica, also stores a partial, read-only replica of all other domain directory partitions in the forest. The additional domain directory partitions are partial because only a limited set of attributes is included for each object. By including only the attributes that are most used for searching, every object in every domain in even the largest forest can be represented in the database of a single global catalog server.

What happens if primary domain controller fails?

You wont be able to access the network resources/login properly to your account.

What naming context is replicated across the domain?

Schema naming context and configuration naming context is replicated across domain in the forest