0
Windows Server 2003
Also known as the Win2K3, Windows Server 2003 is a server OS (operating system) from the American software company Microsoft. This OS has the capability to share printers and files, provide email services, authenticate users, and host message queues.
1,215 Questions
Why cannot you restore a DC that was backed up 7 months ago?
Because of the tombstone life which is set to only 60 days
How do you uninstall Windows Server 2003?
if the server is a Domain controller then first uninstall the active directory from it so that any role managed by the dc are properly tranferred and all other DCs get the information that DC is now not available and they can update themselves through replication and no error occurs regarding that server.
but if server is just a member server without active directory it can be taken out of network(before that do check does it have any share files/print server etc which could effect others)
What are the security administrative issues addressed by a read only domain controller?
Each RODC will have an analagous group that will prevent users passwords from being stored only on a single DC. Members of the purpose group are not eligible to have their passwords stored on any RODC in the domain
Active directory 2003 and active directory 2008 differences?
One of the really exciting new ones is the concept of the read-only domain controller. Before with AD, as compared with NT 4.0 in particular, every domain controller has a writable copy of your directory. You can make a change anywhere and it will propagate throughout the environment. At the same time, all of [the domain controllers] have secrets like your password. Right now with Windows Server 2003, if that server security is physically compromised and gets stolen and it's not secure, then you have a huge security issue in that all the password for that domain are in the DNCs. So the only approach you can take is to make everyone change their password. That's a big deal if you have 100,000 people on that domain.
With the new read-only domain controller feature, this change is two-fold. First you can now define which passwords are stored locally. Now if the server gets stolen, you only have to have 100 people change their passwords versus 100,000.
Second, you can't make any changes on that domain controller (DC), because it's read only.
1.we can install windows 2008 server either in full version(install all services& applications) or server core(only install minimal required services), but in 2003 we can only install fully O.S.
2.Windows server 2008 use Hyper-V application & Roles concept for better productivity but server 2003 does not have such features.
1)2008 is combination of vista and windows 2003r2. Some new services are introduced in it
1. RODC one new domain controller introduced in it
[Read-only Domain controllers.]
2. WDS (windows deployment services) instead of RIS in 2003 server
3. shadow copy for each and every folders
4.boot sequence is changed
5.installation is 32 bit where as 2003 it is 16 as well as 32 bit, that's why installation of 2008 is faster
6.services are known as role in it
7. Group policy editor is a separate option in ads
2) The main difference between 2003 and 2008 is Virtualization, management.
2008 has more inbuilt components and updated third party drivers Microsoft introduces new feature with 2k8 that is Hyper-V Windows Server 2008 introduces Hyper-V (V for Virtualization) but only on 64bit versions. More and more companies are seeing this as a way of reducing hardware costs by running several 'virtual' servers on one physical machine. If you like this exciting technology, make sure that you buy an edition of Windows Server 2008 that includes Hyper-V, then launch the Server Manger, add Roles.
3) In Windows Server 2008, Microsoft is introducing new features and technologies, some of which were not available in Windows Server 2003 with Service Pack 1 (SP1), that will help to reduce the power consumption of server and client operating systems, minimize environmental byproducts, and increase server efficiency.
Microsoft Windows Server 2008 has been designed with energy efficiency in mind, to provide customers with ready and convenient access to a number of new power-saving features. It includes updated support for Advanced Configuration and Power Interface (ACPI) processor power management (PPM) features, including support for processor performance states (P-states) and processor idle sleep states on multiprocessor systems. These features simplify power management in Windows Server 2008 (WS08) and can be managed easily across servers and clients using Group Policies
Is Windows server 2008 better than Windows server 2003?
There are several differences between 2003 and 2008 servers. They look different and their tools are different.
For example Windows 2008 native IP-stack is ver6, which differs from Windows 2003.
Management tools are different in Win 2008; some are better.
Installation is easier, adding new roles to server is much easier. Many support both systems in their work and believe Windows 2008 is quite good and is an improvement to Windows 2003.
Windows 2008 needs more power from the system than Windows 2003, but most problems are caused by mixing different server platforms on DC. You can mix Windows 2000, 2003 and 2008 member servers, but not DCs. There is one exception: Don't consider SBS2008. You can't upgrade it to standard, SBS is for little environment. If you have to buy new CALs, they are much expensive than standards CALs. SBS2008 is also only 64bit and you have to load in compatibility mode in normal systems.
I would consider not to install 2k8 if you are supporting a network with NT legacy as 2k8 is not reverse compatible to NT.
What is the Difference between server and domain controller?
Server is a computer which serves files to other users or computers. A server can be a windows XP operating system also, but it does not have any security
Domain controller is a computer which controls other users or computers .A domain controller must have windows 2003 server operating system and need to configure as a domain. It has a Excellent security
A conditional forwarder will forward DNS queries to different servers based on domain name.
Shadow Copy (also called Volume Snapshot Serviceor VSS) is a feature in recent versions of http://www.answers.com/topic/microsoft-windows that allows taking manual or automatic backup copies or http://www.answers.com/topic/snapshot-game of a file or folder on a specific http://www.answers.com/topic/volume-computing at a specific point in time. It is used by http://www.answers.com/topic/ntbackup and the Volume Shadow Copy service to backup files. In http://www.answers.com/topic/windows-vista, it is used by Windows Vista's backup utility, http://www.answers.com/topic/system-restore-1 and the Previous Versions feature
ANSWER: You can change a snap-in context by selecting Connect to another Computer from the Action menu. A snap-in does not have to be reloaded to change its configuration.
What does the sysvol folder stores in an active directory?
The sysVOL folder stores the server's copy of the domain's public files. The contents such as group policy, users etc of the sysvol folder are replicated to all domain controllers in the domain.
The sysvol folder must be located on an NTFS volume The article describes how to use the Burflags registry entry to rebuild each domain controller's copy of the system volume (SYSVOL) tree on all domain controllers in a common Active Directory directory service domain. The term SYSVOL refers to a set of files and folders that reside on the local hard disk of each domain controller in a domain and that are replicated by the File Replication service (FRS).
Network clients access the contents of the SYSVOL tree by using the following shared folders:
What is active directory schema?
All databases have a schema which is a formal definition (set of rules) which govern the database structure and types of objects and attributes which can be contained in the database. The schema contains a list of all classes and attributes in the forest.
The schema keeps track of:
- Classes
- Class attributes
- Class relationships such as subclasses (Child classes that inherit attributes from the super class) and super classes (Parent classes).
- Object relationships such as what objects are contained by other objects or what objects contain other objects.
There is a class Schema object for each class in the Active Directory database. For each object attribute in the database, there is an attributeSchema object.
PartitionsActive Directory objects are stored in the Directory Information Tree (DIT) which is broken into the following partitions:
- Schema partition - Defines rules for object creation and modification for all objects in the forest. Replicated to all domain controllers in the forest. Replicated to all domain controllers in the forest, it is known as an enterprise partition.
- Configuration partition - Information about the forest directory structure is defined including trees, domains, domain trust relationships, and sites (TCP/IP subnet group). Replicated to all domain controllers in the forest, it is known as an enterprise partition.
- Domain partition - Has complete information about all domain objects (Objects that are part of the domain including OUs, groups, users and others). Replicated only to domain controllers in the same domain.
- Partial domain directory partition - Has a list of all objects in the directory with a partial list of attributes for each object.
The DIT holds a subset of Active Directory information and stores enough information to start and run the Active Directory service
What port number does the TFTP server use to accept request from client?
By default a TFTP server will accept connection requests on UDP port 69.
What are the logs found in Event Viewer in a windows Server 2003 system?
Event Viewer (can be opened by Start -->Run --> eventvwr)
What are the partitions in Active Directory?
1.-schema partition
2.-configuration partition
3.-domain partition
4.-application partition
objectGUID property
unique security identifiers (SIDs)
Each object represents a single entity-whether a user, a computer, a printer, or a group-and its attributes. Certain objects can contain other objects. An object is uniquely identified by its name and has a set of attributes-the characteristics and information that the object represents- defined by a schema, which also determines the kinds of objects that can be stored in Active Directory.
What shared folder is replicated to each domain controller and stores domain wide information?
SYSVOL folder has all the settings.its a share folder which has database ntds.dit
grp policies/templete, logon procedures etc
What happens when each fsmo fails?
f each one of them fails then below are the effects of the same:-
Schema Master - Schema updates are not available - These are generally planned changes and the first step when doing a schema change is normally something like "make sure your environment is healthy". There isn't any urgency if the schema master fails, having it offline is largely irrelevant until you want to make a schema change.
Domain Naming Master - No new domains or application partitions can be added - This sort of falls into the same "healthy environment" bucket as the schema master. When we upgraded the first DC to a beta Server 2003 OS which included the code to create the DNS application partitions, we couldn't figure why they weren't instantiated until we realized that the server hosting the DNM was offline (being upgraded) at the same time. Infrastructure Master - No cross domain updates, can't run any domain preps - Domain preps are planned (again). But no cross-domain updates. That could be important if you have a multi-domain environment with a lot of changes occurring.
RID Master - New RID pools unable to be issued to DC's - This gets a bit more complicated, but let me see if I can make it easy. Every DC is initially issued 500 RID's. When it gets down to 50% (250) it requests a second pool of RID's from the RID master. So when the RID master goes offline, every DC has anywhere between 250 and 750 RIDs available (depending on whether it's hit 50% and received the new pool).
PDC - Time, logins, password changes, trusts - So we made it to the bottom of the list, and by this point you've figured that the PDC has to be the most urgent FSMO role holder to get back online. The rest of them can be offline for varying amounts of time with no impact at all. Users may see funky behavior if they changed their password, but replication will probably have completed before they call the help desk so nothing to worry about, and trust go back to that whole "healthy forest" thing again.
How do you change a server's name in windows 2003?
windows key + pause key,
click computer name,
click change.
Restart PC
there may be a better way without having to restart but I haven't found it yet. For those who do not find the pause key: it has the same effect as right click on "My Computer" and choosing properties.
What is the network devices recommended to be assigned a static ip address?
Routers, Access Points, Printers... Every device you will need to access sooner or later...computer can stay with Dynamic IP's since they should show their name in network, but routers, access points, printers, while they may show its not guaranteed.
Difference between a Local Group Policy and a Domain Group Policy?
Microsoft recommends that access control to computer resources be administered by using groups. In this way, many users that have similar needs for resources can be dropped into a group that has the correct permissions already configured instead of individually modifying each user account.
Group permissions to access resources are configured using group policy. A policy usually addresses one very specific aspect of a system's configuration. There are many policies that can be configured for a group to control system access and behavior.
Local group policy addresses only users who are physically logging into one particular machine such as the server itself or a stand alone operating system. To log into a machine locally, a user must create a unique ID/Password pair that authenticates the local user to the local physical system. Once authenticated to the local physical machine, group policy according to which local group the user is assigned is initiated.
Domain authentication as well as domain group policy is maintained centrally by the server for the domain. Even if a user has configured a local ID/Password pair for their local physical computer, a different and unique ID/Password pair is created to log onto the domain. When a domain user is created, they also must be assigned to a domain group. Once the server for the domain authenticates the domain user, the policy for the domain group the user belongs to is initiated. These policies are centrally administered by the domain administrator instead of each computer in the domain being configured separately for each user. Domain group policy can be configured to control access and behavior for any resource on the entire domain including resources on client computers. Local group policy can only control what is on the local machine at which a user is sitting. Finally, domain group policy supersedes any local group policy.
