Interview Questions.

Q1. Why Dns Server Is Required For Active Directory?

The key reason for integrating DNS and AD is performance. This is specifically true in which you have got masses of replication site visitors. You can't solve host names. You cannot find offerings, like a domain controller.

Q2. Anything Special You Should Do When Adding A User That Has A Mac?

"Save password as encrypted clean text" ought to be decided on on User Properties Account Tab Options, for the reason that Macs only keep their passwords that way.

Q3. Explain About Group Policy?

Group rules are used by directors to configure and manage user surroundings settings. Group Policy Objects (GPOs) are used to configure organization policies that are implemented to web sites, domains, and organizational gadgets (OUs). Group policy may be blocked or set so it can not be overridden. The default is for subobjects to inherit the policy in their dad and mom. There is a most of one thousand relevant institution rules.

Q4. What Is Sysvol Folder?

The sysvol folder stores the server's reproduction of the area's public files. The contents together with group coverage, users and so forth of the sysvol folder are replicated to all domain controllers within the domain. The sysvol folder should be located on an NTFS extent.

Q5. What Is Quotas?

Disk Quota is a function or service of NTFS which allows to limit or manipulate the disk usage from the everyday person. It can be implemented in step with person user consistent with volume basis.By default it's far disabled. Administrative privilege is needed to carry out the undertaking. In 2003server we will manage simplest pressure however in 2008server we can establish quota in folder stage.

Q6. How Will You Backup Dns Server?

If you're the usage of Active Directory-included DNS, then your DNS facts is stored in Active Directory itself, and you may need to lower back up the entire device state. If not, however, The Backup listing inside the %SystemRootp.CSystem32Dns folder includes backup records for the DNS configuration and the DNS database.

Q7. What Is The Purpose Of Dhcp Server?

A DHCP server is the server that is accountable for assigning unique IP deal with to the computers on a network. No  computer systems (without a doubt, no  community cards1 [even if two are in one computer]) may have the equal IP cope with on a community on the same time or there may be conflicts.

To that cease, DHCP servers will take a request from a laptop that has simply been introduced (or is renewing) to the network and assign it a unique IP cope with that is to be had. These assignments normally most effective last for a limited time (an hour to per week usually) and so you are in no way assured that the IP deal with for a selected computer will remain the identical whilst the use of a DHCP (a few DHCP servers can help you specify that a pc receives the same deal with all of the time however).

Q8. How Can You Restrict Running Certain Applications On A Machine?

The Group Policy Object Editor and the Software Restriction Policies extension of Group Policy Object Editor are used to limit jogging sure programs on a device. For Windows XP computers that aren't taking part in a domain, you could use the Local Security Settings snap-in to get right of entry to Software Restriction Policies.

Q9. Explain About Group Scopes?

A DHCP scope is a legitimate range of IP addresses that are available for assignments or lease to customer computer systems on a selected subnet. In a DHCP server, you configure a scope to determine the cope with pool of ip which the server can offer to DHCP customers.

Scopes decide which IP addresses are provided to the customers. Scopes should be defined and activated before DHCP clients use the DHCP server for its dynamic IP configuration. You can configure as many scopes on a DHCP server as is needed for your community surroundings.

Q10. How Will You Restrict User Logon Timing In Domain?

Start->dsa.Msc->double click on on users->right click on on any users->residences->click on account->click on logon hours->logon denied->pick time (via dragging mouse)->click on logon permission->good enough.

Q11. What Is Hidden Share?

Using hidden shares in your community is beneficial if you do now not need a shared folder or force on the network to be effortlessly available. Hidden shares can upload some other layer of safety for shared documents in opposition to unauthorized human beings connecting to your community.

Using hidden stocks allows do away with the risk for human beings to wager your password (or be logged into a certified Windows account) and then receive get right of entry to to the shared useful resource.

Windows automatically shares difficult drives by means of default for administrative functions. They are hidden stocks named with the force letter observed through a dollar signal (e.G., C$) and commented as Default Share.

Thus, certain networking and administrator capabilities and applications can paintings properly. Not that stopping Windows from growing those hidden or administrative shares by way of default every time your pc boots up takes a registry trade.

Q12. If I Delete A User And Then Create A New Account With The Same Username And Password, Would The Sid And Permissions Stay The Same?

No. If you delete a person account and attempt to recreate it with the identical consumer call and password, the SID may be one-of-a-kind.

Q13. Explain Different Edition Of Windows 2003 Server?

Windows Server 2003, Web Edition :- is especially for constructing and hosting Web packages, Web pages, and XML Web Services.

Windows Server 2003, Standard Edition :- is aimed in the direction of small to medium sized organizations. Flexible yet flexible, Standard Edition helps file and printer sharing, offers cozy Internet connectivity, and permits centralized desktop software deployment

Windows Server 2003, Enterprise Edition :- is aimed in the direction of medium to huge groups. It is a full-characteristic server running gadget that helps up to eight processors and presents employer-elegance features which includes eight-node clustering using Microsoft Cluster Server (MSCS) software program and guide for as much as 32 GB of memory.

Windows Server 2003, Datacenter Edition:- is the flagship of the Windows Server line and designed for sizeable infrastructures disturbing excessive security and reliability.

Windows Server 2003, Compute Cluster Edition:- is designed for working with the maximum difficult computing troubles that could require high performance computing clusters.

Windows Storage Server 2003:- is optimised to offer devoted file and print sharing services. It is only to be had via OEMs when bought pre-configured with network attached storage gadgets.

Q14. What Do You Do If Earlier Application Does Not Run On Windows Server 2003?

When an utility that ran on an in advance legacy version of Windows can't be loaded for the duration of the setup feature or if it later malfunctions, you ought to run the compatibility mode characteristic.

This is completed by proper-clicking the application or setup software and deciding on Properties -> Compatibility -> choosing the previously supported working system.

Q15. What Remote Access Options Does Windows Server 2003 Support?

Dial-in, VPN, dial-in with callback.

Q16. Explain Backup Methodology?

The distinct forms of backup methodologies are:

Normal Backup:- This is default backup in which all files are subsidized up even supposing it changed into subsidized up before.

Incremental Backup:- In this type of backup only the documents that have not been sponsored up are looked after or backed up.

Differential Backup:- This backup is similar to incremental backup as it does now not take backup of those documents sponsored up by using regular backup but different from incremental as it will take backup of differentially sponsored up files at next time of differential backup.

Copy Backup:- This sort of backup is that's used at some point of machine state backup and asr backup. It is used in special conditions most effective.

Daily Backup:- This type of backup takes backup of best the ones documents which are created on that particular day.

System Backup:- This form of backup takes backup of files particularly, Boot document, COM+Class Registry, Registry. But in server it takes backup of advertisements.

ASR Backup:- This kind of backup takes backup of complete boot partition such as OS and consumer records. This ought to be the ultimate troubleshooting method to get better an os from disaster.

Q17. What Is The Entire Problem If Dns Server Fails?

If your DNS server fails, you can't resolve host names. You cannot clear up area controller IP Address.

Q18. What Do You Do With Secure Sign-ons In An Organization With Many Roaming Users?

Credential Management function of Windows Server 2003 affords a consistent single sign-on revel in for customers. This may be useful for roaming customers who move among computer systems. The Credential Management function provides a at ease shop of user credentials that includes passwords and X.509 certificate.

Q19. How Do You Get To Internet Firewall Settings?

Start -> Control Panel -> Network and Internet Connections -> Network Connections.

Q20. What Is Exclusion Range In Dhcp Server?

Exclusion Range is used to reserve a bank of ip addresses so pc that require best static ip cope with such as DNS servers, legacy printers can use reserved assigned addresses .These aren't assigned via DHCP server.

Q21. Where Are The Windows Nt Primary Domain Controller (p.C) And Its Backup Domain Controller (bdc) In Server 2003?

The Active Directory replaces them. Now all area controllers share a multimaster peer-to-peer examine and write relationship that hosts copies of the Active Directory.

Q22. How Will Map A Folder Through Ad?

Navigate domain consumer houses->supply direction in profile tab within the format servernamesharename.

Q23. Explain How To Publish Printer Through Ad?

The institution policy putting ‘Automatically put up new printers in AD' when disabled, prevents the Add Printer Wizard from automatically publishing shared printers. In addition, Group policy placing ‘Allow printers to be published' ought to be enabled(default) for printers to be published on that computer systems.

Q24. What Is Dns Server?

Domain Name System (or Service or Server), a service that resolves domain names into IP addresses and vice versa. Because domains are alphabetic, they are less difficult to consider.

The Internet but, is without a doubt based on ip addresses. Every time you operate a site call, consequently, a DNS carrier should translate the call into the corresponding IP cope with. For instance, the domain name www.Example.Com might translate to 198.One hundred and five.232.4.

The DNS gadget is, in truth, its own network. If one DNS server does not know how to translate a specific area call, it asks some other one, and so on, till the proper IP deal with is again.

Q25. How Do I Configure A Client Machine To Use A Specific Ip Address?

Reservation using mac address in DHCP.

Q26. How Do You Change The Ds Restore Admin Password?

Microsoft Windows 2000 makes use of the Setpwd utility to reset the DS Restore Mode password. In Microsoft Windows Server 2003, that capability has been included into the NTDSUTIL device. Note which you cannot use the system if the target server is running in DSRM.

Q27. How Do You Backup & Restore Ad?

You can backup Active Directory via using the NTBACKUP tool that comes integrated with Windows Server two hundred@Backing up the Active Directory is achieved on one or extra of your Active Directory domain Controllers, and is completed by using backing up the System State on those servers. The System State incorporates the nearby Registry, COM+ Class Registration Database, the System Boot Files, certificates from Certificate Server (if it is hooked up), Cluster database (if it's installed), NTDS.DIT, and the SYSVOL folder. The tombstone is 60 days (Windows 2000/2003 DCs), or one hundred eighty days (Windows Server 2003 SP1 DCs).

You can use one of the three methods to repair Active Directory from backup media: Primary Restore, Normal Restore (i.E. Non Authoritative), and Authoritative Restore.

Primary Restore: This approach rebuilds the first area controller in a site when there is no other manner to rebuild the area. Perform a number one repair only whilst all of the domain controllers in the area are misplaced, and you want to rebuild the area from the backup. Members of the Administrators institution can carry out the number one restore on local computer. On a site controller, simplest members of the Domain Admins group can carry out this repair.

Normal Restore: This approach reinstates the Active Directory statistics to the country earlier than the backup, and then updates the data thru the everyday replication process. Perform a normal restore for a single area controller to a previously acknowledged exact nation.

Authoritative Restore: You perform this technique in tandem with a normal restore. An authoritative repair marks precise records as modern-day and stops the replication from overwriting that data. The authoritative information is then replicated thru the area. Perform an authoritative restore for man or woman object in a site that has more than one domain controllers. When you carry out an authoritative restore, you lose all changes to the restore object that came about after the backup. You want to use the NTDSUTIL command line software to carry out an authoritative repair. You need to apply it with the intention to mark Active Directory items as authoritative, so that they get hold of a higher model lately modified statistics on different area controllers does no longer overwrite System State facts at some point of replication.

Q28. How Can You Authenticate Between Forests?

Four forms of authentication are used throughout forests: 

(1) Kerberos and NTLM community logon for far off get right of entry to to a server in another wooded area; 

(2) Kerberos and NTLM interactive logon for bodily logon out of doors the user's home wooded area; 

(three) Kerberos delegation to N-tier software in another wooded area; and 

(four) person essential call (UPN) credentials.

Q29. Where Are The Settings For All The Users Stored On A Given Machine?

Document and Settings All Users

Q30. How Will Backup Dhcp Server?

The Backup listing inside the %SystemRootpercentSystem32DHCP folder incorporates backup facts for the DHCP configuration and the DHCP database. By default, the DHCP database is subsidized up each 60 minutes automatically. To manually again up the DHCP database at any time, follow these steps:

@In the DHCP console, proper-click the server you want to again up, and then click Backup.

@In the Browse For Folder dialog box, pick the folder with the intention to contain the backup DHCP database, and then click on OK.

Q31. What Is Global Catalog?

The Global Catalog authentication network consumer logins and fields inquiries about gadgets across a wooded area or tree. Every area has as a minimum one GC this is hosted on a website controller. In Windows 2000, there has been normally one GC on each site that allows you to prevent consumer logon screw ups across the community.

Q32. How Do You Double-boot A Win 2003 Server Box?

The Boot.Ini document is ready as study-only, device, and hidden to prevent unwanted modifying. To exchange the Boot.Ini timeout and default settings, use the System option in Control Panel from the Advanced tab and select Startup.

Q33. What Is The Default Time For Group Policy Refresh Interval Time?

The default refresh c language for regulations is ninety mins. The default refresh c programming language for area controllers is five minutes. Group policy item's institution policy refresh durations can be modified within the institution coverage object.

Q34. What Is Apipa?

A Windows-primarily based laptop that is configured to use DHCP can mechanically assign itself an Internet Protocol (IP) deal with if a DHCP server isn't available or does not exist. The Internet Assigned Numbers Authority (IANA) has reserved 169.254.Zero.Zero-169.254.255.255 for Automatic Private IP Addressing(APIPA).

Q35. What Is New In Windows Server 2003 Regarding The Dns Management?

When DC promotion happens with an current wooded area, the Active Directory Installation Wizard contacts an existing DC to update the listing and reflect from the DC the specified portions of the directory.

If the wizard fails to discover a DC, it performs debugging and reviews what prompted the failure and how to fix the trouble. In order to be placed on a community, every DC ought to check in in DNS DC locator DNS statistics.

The Active Directory Installation Wizard verifies a right configuration of the DNS infrastructure. All DNS configuration debugging and reporting activity is finished with the Active Directory Installation Wizard.

Q36. If You Uninstall Windows Server 2003, Which Operating Systems Can You Revert To?

Win ME, Win 98, 2000, XP. 

Note, however, that you can not upgrade from ME and ninety eight to Windows Server 2003.

Q37. How Long Does It Take For Security Changes To Be Replicated Among The Domain Controllers?

Security-related adjustments are replicated within a domain right now. These adjustments encompass account and character consumer lockout regulations, changes to password regulations, modifications to pc account passwords, and changes to the Local Security Authority (LSA).

Q38. Explain About Ad Database?

Windows 2003 Active Directory statistics store, the real database document, is %SystemRoot%ntdsNTDS.DIT. The ntds.Dit document is the heart of Active Directory which includes person money owed. Active Directory's database engine is the Extensible Storage Engine ( ESE ) which is primarily based on the Jet database used by Exchange 5.5 and WINS.

The ESE has the functionality to grow to 16 terabytes which could be big sufficient for 10 million gadgets.Only the Jet database can manage facts inside the AD datastore.

Q39. Where Are The Documents And Settings For The Roaming Profile Stored?

All the files and environmental settings for the roaming user are saved domestically on the gadget, and, whilst the consumer logs off, all changes to the regionally stored profile are copied to the shared server folder. Therefore, the primary time a roaming person logs on to a new machine the logon technique may take some time, depending on how huge his profile folder is.

Q40. What Is Active Directory?

Active Directory is a network-primarily based object store and provider that locates and manages assets, and makes those resources to be had to legal users and groups.

An underlying precept of the Active Directory is that the entirety is considered an item-human beings, servers, workstations, printers, files, and gadgets. Each item has certain attributes and its very own security get admission to manage list (ACL).

Q41. What Languages Can You Use For Log-on Scripts?

JavaScript, VBScript, DOS batch files (.Com, .Bat, or even .Exe)

Q42. How Will Assign Local Administrator Rights For Domain User?

To assign a website consumer with local administrative proper in any purchaser of domain we need to log in to the reputable consumer system then, Start->control panel->user bills->deliver username, password and call of area->upload->superior->places->discover now->choose others(in that select administrator consumer)->ok->next->good enough.

Q43. How Is User Account Security Established In Windows Server 2003?

When an account is created, it is given a unique get entry to wide variety referred to as a security identifier (SID). Every institution to which the user belongs has an related SID.

The user and related organization SIDs collectively shape the person account's protection token, which determines get right of entry to tiers to items for the duration of the device and community.

SIDs from the security token are mapped to the get right of entry to manage listing (ACL) of any item the person attempts to access.

Q44. What Snap-in Administrative Tools Are Available For Active Directory?

Active Directory Domains and Trusts Manager, Active Directory Sites and Services Manager, Active Directory Users and Group Manager, Active Directory Replication (optionally available, to be had from the Resource Kit), Active Directory Schema Manager (non-obligatory, to be had from adminpak)

Q45. What Is Soa Record?

Start Of Authority(SOA) Records indicate that Name Server is authoritative server for the domain.

Q46. When Should You Create A Forest?

Organizations that function on considerably one-of-a-kind bases may additionally require separate bushes with distinct namespaces. Unique alternate or brand names often supply upward push to separate DNS identities. Organizations merge or are received and naming continuity is desired.

Organizations shape partnerships and joint ventures. While get entry to to commonplace assets is desired, a separately defined tree can enforce extra direct administrative and safety restrictions.

Q47. What Types Of Classes Exist In Windows Server 2003 Active Directory?

Structural elegance:

The structural magnificence is vital to the device administrator in that it is the handiest kind from which new Active Directory objects are created. Structural lessons are advanced from either the modification of an existing structural kind or the use of one or more abstract instructions.

Abstract magnificence:

Abstract classes are so named due to the fact they take the shape of templates that sincerely create different templates (abstracts) and structural and auxiliary classes. Think of abstract lessons as frameworks for the defining objects.

Auxiliary elegance:

The auxiliary magnificence is a listing of attributes. Rather than observe numerous attributes whilst growing a structural class, it gives a streamlined alternative with the aid of applying a combination of attributes with a unmarried include action.

88 magnificence:

The 88 elegance consists of item classes defined prior to 1993, when the 1988 X.500 specification became followed. This type does no longer use the structural, abstract, and auxiliary definitions, nor is it in common use for the development of gadgets in Windows Server 2003 environments.

Q48. Explain The Functionality Of Ftp Server?

The FTP server is to simply accept incoming FTP requests. Copy or circulate the documents that you need to make available to the FTP publishing folder for get admission to.

The default folder is drive:InetpubFtproot, where pressure is the pressure on which IIS is mounted In the consumer-server version, a file server is a computer responsible for the principal storage and management of statistics documents in order that different computer systems on the equal network can get entry to the documents.

A record server permits users to percentage records over a network while not having to physically transfer files by using floppy diskette or some different external storage device.

Q49. What Are The Windows Server 2003 Keyboard Shortcuts?

Winkey opens or closes the Start menu. Winkey + BREAK shows the System Properties conversation container. Winkey + TAB movements the focal point to the subsequent software in the taskbar.

Winkey + SHIFT + TAB movements the point of interest to the previous utility within the taskbar. Winkey + B moves the focal point to the notification place. Winkey + D shows the computing device. Winkey + E opens Windows Explorer showing My Computer.

Winkey + F opens the Search panel. Winkey + CTRL + F opens the Search panel with Search for Computers module selected. Winkey + F1 opens Help. Winkey + M minimizes all. Winkey + SHIFT+ M undoes minimization. Winkey + R opens Run dialog. Winkey + U opens the Utility Manager. Winkey + L locks the computer.

Q50. What Can You Do To Promote A Server To Dc?

Start->Run->DCPROMO