0
Windows Server 2003
Also known as the Win2K3, Windows Server 2003 is a server OS (operating system) from the American software company Microsoft. This OS has the capability to share printers and files, provide email services, authenticate users, and host message queues.
1,215 Questions
What does the sysvol folder stores in an active directory?
The sysVOL folder stores the server's copy of the domain's public files. The contents such as group policy, users etc of the sysvol folder are replicated to all domain controllers in the domain.
The sysvol folder must be located on an NTFS volume The article describes how to use the Burflags registry entry to rebuild each domain controller's copy of the system volume (SYSVOL) tree on all domain controllers in a common Active Directory directory service domain. The term SYSVOL refers to a set of files and folders that reside on the local hard disk of each domain controller in a domain and that are replicated by the File Replication service (FRS).
Network clients access the contents of the SYSVOL tree by using the following shared folders:
What is active directory schema?
All databases have a schema which is a formal definition (set of rules) which govern the database structure and types of objects and attributes which can be contained in the database. The schema contains a list of all classes and attributes in the forest.
The schema keeps track of:
- Classes
- Class attributes
- Class relationships such as subclasses (Child classes that inherit attributes from the super class) and super classes (Parent classes).
- Object relationships such as what objects are contained by other objects or what objects contain other objects.
There is a class Schema object for each class in the Active Directory database. For each object attribute in the database, there is an attributeSchema object.
PartitionsActive Directory objects are stored in the Directory Information Tree (DIT) which is broken into the following partitions:
- Schema partition - Defines rules for object creation and modification for all objects in the forest. Replicated to all domain controllers in the forest. Replicated to all domain controllers in the forest, it is known as an enterprise partition.
- Configuration partition - Information about the forest directory structure is defined including trees, domains, domain trust relationships, and sites (TCP/IP subnet group). Replicated to all domain controllers in the forest, it is known as an enterprise partition.
- Domain partition - Has complete information about all domain objects (Objects that are part of the domain including OUs, groups, users and others). Replicated only to domain controllers in the same domain.
- Partial domain directory partition - Has a list of all objects in the directory with a partial list of attributes for each object.
The DIT holds a subset of Active Directory information and stores enough information to start and run the Active Directory service
What port number does the TFTP server use to accept request from client?
By default a TFTP server will accept connection requests on UDP port 69.
What are the logs found in Event Viewer in a windows Server 2003 system?
Event Viewer (can be opened by Start -->Run --> eventvwr)
What are the partitions in Active Directory?
1.-schema partition
2.-configuration partition
3.-domain partition
4.-application partition
objectGUID property
unique security identifiers (SIDs)
Each object represents a single entity-whether a user, a computer, a printer, or a group-and its attributes. Certain objects can contain other objects. An object is uniquely identified by its name and has a set of attributes-the characteristics and information that the object represents- defined by a schema, which also determines the kinds of objects that can be stored in Active Directory.
What shared folder is replicated to each domain controller and stores domain wide information?
SYSVOL folder has all the settings.its a share folder which has database ntds.dit
grp policies/templete, logon procedures etc
What happens when each fsmo fails?
f each one of them fails then below are the effects of the same:-
Schema Master - Schema updates are not available - These are generally planned changes and the first step when doing a schema change is normally something like "make sure your environment is healthy". There isn't any urgency if the schema master fails, having it offline is largely irrelevant until you want to make a schema change.
Domain Naming Master - No new domains or application partitions can be added - This sort of falls into the same "healthy environment" bucket as the schema master. When we upgraded the first DC to a beta Server 2003 OS which included the code to create the DNS application partitions, we couldn't figure why they weren't instantiated until we realized that the server hosting the DNM was offline (being upgraded) at the same time. Infrastructure Master - No cross domain updates, can't run any domain preps - Domain preps are planned (again). But no cross-domain updates. That could be important if you have a multi-domain environment with a lot of changes occurring.
RID Master - New RID pools unable to be issued to DC's - This gets a bit more complicated, but let me see if I can make it easy. Every DC is initially issued 500 RID's. When it gets down to 50% (250) it requests a second pool of RID's from the RID master. So when the RID master goes offline, every DC has anywhere between 250 and 750 RIDs available (depending on whether it's hit 50% and received the new pool).
PDC - Time, logins, password changes, trusts - So we made it to the bottom of the list, and by this point you've figured that the PDC has to be the most urgent FSMO role holder to get back online. The rest of them can be offline for varying amounts of time with no impact at all. Users may see funky behavior if they changed their password, but replication will probably have completed before they call the help desk so nothing to worry about, and trust go back to that whole "healthy forest" thing again.
How do you change a server's name in windows 2003?
windows key + pause key,
click computer name,
click change.
Restart PC
there may be a better way without having to restart but I haven't found it yet. For those who do not find the pause key: it has the same effect as right click on "My Computer" and choosing properties.
What is the network devices recommended to be assigned a static ip address?
Routers, Access Points, Printers... Every device you will need to access sooner or later...computer can stay with Dynamic IP's since they should show their name in network, but routers, access points, printers, while they may show its not guaranteed.
Difference between a Local Group Policy and a Domain Group Policy?
Microsoft recommends that access control to computer resources be administered by using groups. In this way, many users that have similar needs for resources can be dropped into a group that has the correct permissions already configured instead of individually modifying each user account.
Group permissions to access resources are configured using group policy. A policy usually addresses one very specific aspect of a system's configuration. There are many policies that can be configured for a group to control system access and behavior.
Local group policy addresses only users who are physically logging into one particular machine such as the server itself or a stand alone operating system. To log into a machine locally, a user must create a unique ID/Password pair that authenticates the local user to the local physical system. Once authenticated to the local physical machine, group policy according to which local group the user is assigned is initiated.
Domain authentication as well as domain group policy is maintained centrally by the server for the domain. Even if a user has configured a local ID/Password pair for their local physical computer, a different and unique ID/Password pair is created to log onto the domain. When a domain user is created, they also must be assigned to a domain group. Once the server for the domain authenticates the domain user, the policy for the domain group the user belongs to is initiated. These policies are centrally administered by the domain administrator instead of each computer in the domain being configured separately for each user. Domain group policy can be configured to control access and behavior for any resource on the entire domain including resources on client computers. Local group policy can only control what is on the local machine at which a user is sitting. Finally, domain group policy supersedes any local group policy.
What is the purpose of a Domain User Account?
Using Domain User Account, users have the ability to get to the domain files.
How do you install Windows Server 2008 in a virtual machine?
Installing Server 2008 in a virtual machine is really no different than installing in a physical box; you boot the install DVD in the virtual machine and follow the prompts the same way as booting from the DVD on a real, physical machine.
What is the default authentication protocol in an Active Directory network?
kerberos version 5
NTLM
protocols are used by AD
What is a separate window that enables users to carry out some Word tasks more efficiently?
The task pane is a separate window that lets you efficiently carry out some Word tasks. The task pane also lets you carry out Publisher tasks.
What is piggybacking in computer security?
ACK for the last received packet need not be sent as a new packet, but gets a free ride on the next outgoing data frame(using ACK field in the frame header). The technique is temporarily delaying outgoing ACKs, so that they can be hooked on the next outgoing data frame is called piggybacking. Piggybacking is one of the feature of TCP
When do you get an IP address assigned?
When you connect to the network is normally the time that an Internet Protocol address is created or assigned to your computer
What does active directory require and which components must be installed?
An NTFS partition with enough free space (250MB minimum)
· An Administrator's username and password
· The correct operating system version
· A NIC
· Properly configured TCP/IP (IP address, subnet mask and - optional - default gateway)
· A network connection (to a hub or to another computer via a crossover cable)
· An operational DNS server (which can be installed on the DC itself)
· A Domain name that you want to use
· The Windows 2000 or Windows Server 2003 or Windows Server 2008 CD media
What is the difference between menu bar and title bar?
A toolbar normally has icons on it and is designed for using with the mouse. A menu will have text on it, sometimes showing the icons too, and can be activated with the mouse or the keyboard. Toolbars tend to group related options together, so you have specialised toolbars moreso than specialised menus.
What is a group domain or domain group?
Domain Group Policy is an infrastructure inside of the Microsoft Windows operating systems (Windows Server 2000, 2003, and 2008, along with Vista) that allows the administrator to implement specific configurations for both computers and users. This infrastructure is what provides the centralized management and configuration for an Active Directory environment. Group Policy provides directory-based desktop-configuration management. With Group Policy, you can specify policy settings for registry-based policies, security, software installations, scripts, folder redirection, Remote Installation Services (RIS), and Internet Explorer maintenance.
Admins use Group Policy to define specific configurations for groups of users and computers by creating Group Policy settings. These settings are specified by the Group Policy Object Editor tool and contained in a Group Policy object (GPO), which is in turn linked to Active Directory containers, such as sites, domains, or OUs. Domain Group Policy is the configuration of groups and users within a domain. In this way, Group Policy settings are applied to the users and computers in those Active Directory containers. Admins can configure the users
What valid transmission is recorded to later be used to fraudulently authenticate to a server?
Identify the form of attack where a valid transmission is recorded to later be used to fraudulently authenticate to a server.
