Sunteți pe pagina 1din 22

why the need to allow Dynamic Updates?

The DNS update functionality enables DNS client computers to register and to dynamically update their resource records with a DNS server whenever changes occur. If you use this functionality, you can reduce the requirement for manual administration of zone records, especially for clients that frequently move and use Dynamic Host Configuration Protocol (DHCP) to obtain an IP address.

Where to create the primary, secondary, Active Directory Integrated zones?


If you want to create an Active Directory integrated zone, the server must be Domain Controller. If you want to create the Primary DNS, you can create on Domain Controller or Member server. But if create on member you could not get 4 options under the domain which are meant for Active directory. You can create Secondary zone on a Member Server or on a Domain Controller. There is no difference between them.

What are the advantages with Windows 2000 DNS?


Or

What are the features of Widows 2000 DNS?


Supports SRV (service) records Supports Dynamic Updates Supports IXFR (Incremental Zone Transfer) Supports security

Explain each one of the above?


In windows 2000 Domain you need to have a DNS server to find different services. The SRV records identify these services. When you enable the Dynamic updates, all the records in the zone are automatically created. As we add a computer to the domain, as we add a Domain controller to the domain the corresponding records are automatically created. I.e., you need to create a record in the DNS zone manually to identify those computers or services. When an update is made in the Master it has to be replicated to the Secondary. Previous we used to transfer the entire zone (which is called AXFR (entire zone transfer)). But with Windows 2000 domain we transfer on the records that have been modified. This is called IXFR (Incremental Zone Transfer). We get the security with Active Directory Integrated zone. We can set permission on Active Directory like who can use and who can't use the DNS. And also we have Secure Dynamic updates with Active Directory Integrated zone. By this only specified computers only can dynamically update the records in the zone.

How we make more available our DNS?


By adding more tuple servers or By windows 2000 clustering

What is the purpose of forward lookup?


It resolves the Host names (Friendly Name) to IP addresses

What is the purpose of Reverse lookup zone?


It resolves the IP addresses to Host names

What is the difference between Primary zone and Secondary zone?


Primary zone has read and write permissions, where as Secondary zone has read only permission. Note: Secondary zone is used for Backup and Load balancing.

How to check whether DNS is working or not?


Type the command nslookup at command prompt Then it gives the DNS server name and its IP address

What is Dynamic Updates in DNS?


Generally we need to create a host record for newly joined computer (either client or Member server or Domain controller). If you enable dynamic Update option, then DNS it self creates associated host record for newly joined computers.

What is a zone?
A database of records is called a zone. Also called a zone of authority, a subset of the Domain Name System (DNS) namespace that is managed by a name server.

What is an iterative query?


The query that has been sent to the DNS server from a Client is called iterative query.

What is Recursive query?


Now your DNS server requests the root level DNS server for specific IP address. Now DNS server says that I dont know but I can give the address other person who can help you in finding IP address.

What Type of Records do you find in DNS database?


Host Record Mail Exchange Record (MX record) Alias

Is there any possibility to have two Primary DNS zones?


No, you should not have two primary DNS zones. Why because if u have two primary DNS zones some clients contacts first one, some clients contacts second one according to their configuration in TCP/IP properties. Then you will get problems. Actually Primary DNS zone means Single master. i.e., master is only one that is only one primary DNS zone. But you can have as many as Secondary zones. To overcome from above problem (i.e., single master problem) in Windows 2000 we have Active Directory Integrated zones, which are multi masters.

How to create a Secondary DNS zone?


To create a secondary zone you should have Primary DNS zone or Active Directory Integrated DNS zone. You have to follow the same procedure as same as primary DNS configuration. But at the time selection, select Secondary zone instead of primary zone. After that it asks the primary DNS zone address provide that address. Create forward lookup zone and reverse lookup zone as usual. Then, Right click on forward lookup zoneNew zone Active Directory Integrated Primary Secondary Select Secondary zone (Note:-The option Active Directory Integrated Zone is available on when you have installed the Active Directory; if you have not installed Active Directory the option is disabled.) Then it asks for Primary DNS zone details, provide those details then click on finish. Now go to Primary or Active Directory integrated zone then right click on zone name propertiesclick on zone transfer Tab Select allow zone Transfers Here you can see three options. To any server Only to servers listed on the Name servers tab Only to the following servers Select anyone and give the details of secondary zone (only in case of second and third option). Click on apply, thenOK Note: In zone transfers tab you can find another option Notify, this is to automatically notify secondary severs when the zone changes. Here also you can select appropriate options. Note: In secondary zone you cannot modify any information. Every one has read only permission. Whenever Primary DNS is in down click on change tab on general tab of properties, to change as primary, then it acts as primary, there you can write permission also.

Suppose the Secondary zone is Expired then, how to solve the problem?
First go to primary zone check primary zone is working or not. IF primary zone is working then go to secondary zone, Right click on zone name select the Transfer from Master then it automatically contacts the primary DNS, if any updates are there then it takes the updates from the Primary.

How to know whether the recent changes in Primary are updated to secondary zone or not?

Compare the Serial Number on Start of Authority tab in both secondary on primary DNS zone properties. If both are same then recent updates are made to secondary zone. If not (i.e., secondary is less then primary) click on Transfer from Master How to change form Primary to Secondary or Secondary to primary or Active directory integrated to secondary or primary like that (simply one type of zone to another type of zone)? Go to the properties of the zone click on general tab, there you can find the option called Change click on it then select appropriate option. Then click on OK

What is a forwarder?
(Open DNS console Right click on Domain name Click on forwarder tab) A forwarder is server, which has more access than the present DNS server. May be our present DNS server is located in internal network and it cannot resolve the Internet names. May be it is behind a firewall or may it is using a proxy server or NAT server to get to the Internet. Then this server forwards the query to another DNS server that can resolve the Internet names.

Who can authorize DHCP server in the entire domain?


An Enterprise administrator can only authorize DHCP server. No other person in the domain can authorize the DHCP server. Even if u r Administrator without enterprise administrator privileges you cant authorize the DHCP server. Note: If it is not authorized a red symbol (down red arrow) will appear, if u authorize it then a green up arrow will appear.

How to authorize the DHCP server?


Login with Enterprise administrator privileges. Right Click on Servername.Domainname.com Click on Authorize Then it will be authorized (Indication is you will get green up arrow) Now you have to create scope. Note: A scope is range of IP addresses that you want to allocate to the clients.

What is the default lease duration, minimum lease duration and maximum lease duration?
By default any system will get 8 lease days to use IP address. Note: You can increase or decrease the Lease duration, You have assign at least minimum duration of 1 second and you can assign Maximum duration of 999 days 23 hours 59 minutes. Note: If you havent log on for 50% of the duration continuously the IP address will be released. ClickNe xt Now you will get a Window asking whether you want to configure the options (DNS, WINS, and Router etc.)

You can configure the options now itself or you can authorize after completion of this. Select any one then clickNext. ClickFin ish. Note: If u have selected NO in the above window you can configure above things anytime like below Click on server optionconfigure options Select the required ones Enter server name, IP address Click OK Now you have to activate the Scope Right click on Scope Click on Activate Note: You can reserve IP address for specific Clients. Or You can Exclude IP address (without allocation) for future purpose. The above things all are in server

What is the protocol that is used for DHCP process?


Bootp

Why DHCP Relay Agent is used?


To extend DHCP services beyond routers (IF bootp is not installed in router)

What are the commands used for DHCP?


Ipconfig Ipconfig /all Ipconfig /release Ipconfig /renew

What is the process of assigning IP address by DHCP service?


There are four stages in assigning IP address to a host by DHCP server. 1) DHCP discover 2) DHCP offer 3) DHCP request 4) DHCP Acknowledge DHCP Discover: When ever client has to obtain an IP address from a DHCP server it will broadcast a message called DHCP discover , which contains destination address 255.255.255.255 and source IP address as 0.0.0.0 and its MAC address. DHCP offer: The DHCP server on the network will respond to DHCP discover by sending a DHCP offer message to the client requesting an IP address. DHCP request: The client after receiving offer message will send a DHCP request message asking the DHCP server to confirm the IP address it has offered to it through DHCP offer message. DHCP Acknowledge: DHCP server will respond to the DHCP request message by sending acknowledge message through which it confirms the IP address to other machine.

What is the difference between windows 2000 server and Windows 2000 advanced server, Data center server?
In Windows 2000 server we dont have Clustering, Network load balancing. Where as in Windows 2000 advanced server and in Data center server we have Clustering and Network load balancing. In 2000-Advanced server and Data center server we have more RAM and more Processors.

Can you change the Name of a Domain Controller?


You cannot change the name of a server while it is a domain controller in windows 2000 domain. Instead, you must change it to a member or stand-alone server, change the name, and finally make the server a domain controller once again. But you can change the name of a domain controller in windows 2003 Operating System.

Why do we need Multiple Domain Controllers?


If you have multiple domain controllers, it provides better support for users than having only one. Multiple domain controllers provide automatic backup for user accounts and other Active Directory data, and they work together to support domain controller functions (such as validating logons).

What is the structure and purpose of a directory service?


A directory service consists of a database that stores information about network resources, such as computer and printers, and the services that make this information available to users and applications.

What is Active Directory?


Active Directory is a directory service, which stores information about network resources such as users, groups, computes, printers, and shares. Active Directory provides single point for organization, control, management. Note: In a lay man language Active Directory is some thing like Yellow Pages.

What roles does a Main Domain Controller (the first domain controller in the entire forest) will have by default?
By default it gets 5 roles. Schema Master Domain Naming Master PDC Emulator Relative Identifier (RID) Infrastructure Master (IM) Note: The above roles are called operations master roles.

What are the roles an Additional Domain controller will have by default?

By default you cannot get any role. But if you want to assign any role you can transfer from master. What are the roles a Child Main Domain Controller will have by default? By default it gets only three roles. PDC Emulator Relative Identifier (RID) Infrastructure Master (IM)

What are the roles a Child additional Domain controller will have by default?
By default it wont get any role. But if want to assign you can transfer from main child domain controller.

Explain the activities of each role?


1) Schema Master: It will govern the Active Directory to all the Domain Controllers in a forest. 2) Domain Naming Master: Maintains the unique Domain Naming System in a forest to avoid duplication. 3) RID master: It assigns unique ID to every user account. (Domain + RID) 4) PDC Emulator: If PDC is upgraded to windows 2000 it will send data to BDCs on the network. (Replication of user Database) If the user password is not matching in a particular Domain, then it will contact PDC emulator of first Domain Controller (Master Domain controller) 5) Infrastructure Master: Maintains the infrastructure group proper files on the master Domain controller.

1.

What is presentation layer responsible for in the OSI model? The presentation layer

establishes the data format prior to passing it along to the network applications interface. TCP/IP networks perform this task at the application layer. 2. Does Windows Server 2003 support IPv6? Yes, run ipv6.exe from command line to disable it.

3.

Can Windows Server 2003 function as a bridge? Yes, and its a new feature for the 2003

product. You can combine several networks and devices connected via several adapters by enabling IP routing. 4. Whats the difference between the basic disk and dynamic disk? The basic type contains partitions, extended partitions, logical drivers, and an assortment of static volumes; the dynamic type does not use partitions but dynamically manages volumes and provides advanced storage options 5. Whats a media pool? It is any compilation of disks or tapes with the same administrative properties. 6. How do you install recovery console? C:\i386\win32 /cmdcons, assuming that your Win server installation is on drive C. 7. Whats new in Terminal Services for Windows 2003 Server? Supports audio transmissions as well, although prepare for heavy network load

8. Whats the name of the user who connects to the Web site anonymously? IUSR_computername

9. What secure authentication and encryption mechanisms are supported by IIS 6.0? Basic
authentication, Digest authentication, Advanced digest authentication, Certificate-based Web transactions that use PKCS #7/PKCS #10, Fortezza, SSL, Server-Gated Cryptography, Transport Layer Security 10. Whats the relation between SSL and TLS? Transport Layer Security (TLS) extends SSL by providing cryptographic authentication.

11. Whats the role of http.sys in IIS? It is the point of contact for all incoming HTTP requests. It listens for
requests and queues them until they are all processed, no more queues are available, or the Web server is shut down. 12. Wheres ASP cache located on IIS 6.0? On disk, as opposed to memory, as it used to be in IIS 5. 13. What is socket pooling? Non-blocking socket usage, introduced in IIS 6.0. More than one application can use a given socket.

14. Describe the process of clustering with Windows 2003 Server when a new node is added. As a
node goes online, it searches for other nodes to join by polling the designated internal network. In this way, all nodes are notified of the new nodes existence. If other nodes cannot be found on a preexisting cluster, the new node takes control of the quorum resources residing on the shared disk that contains state and configuration data. 15. What applications are not capable of performing in Windows 2003 Server clusters? The ones written exclusively for NetBEUI and IPX.

16. Whats a heartbeat? Communication processes between the nodes designed to ensure nodes health. 17. Whats a threshold in clustered environment? The number of times a restart is attempted, when the
node fails.

18. You need to change and admin password on a clustered Windows box, but that requires
rebooting the cluster, doesnt it? No, it doesnt. In 2003 environment you can do that via cluster.exe utility which does not require rebooting the entire cluster. 19. For the document of size 1 MB, what size would you expect the index to be with Indexing Service? 150-300 KB, 15-30% is a reasonable expectation.

20. Doesnt the Indexing Service introduce a security flaw when allowing access to the index? No,
because users can only view the indices of documents and folders that they have permissions for.

21. Whats the typical size of the index? Less then 100K documents - up to 128 MB. More than that - 256+
MB.

22. Which characters should be enclosed in quotes when searching the index? &, @, $, #, ^, ( ), and
|.

23. How would you search for C++? Just enter C++, since + is not a special character (and neither is C). 24. What about Barnes&Noble? Should be searched for as Barnes&Noble. 25. Are the searches case-sensitive? No. 26. Whats the order of precedence of Boolean operators in Microsoft Windows 2003 Server
Indexing Service? NOT, AND, NEAR, OR.

27. Whats a vector space query? A multiple-word query where the weight can be assigned to each of the
search words. For example, if you want to fight information on black hole, but would prefer to give more weight to the word hole, you can enter black[1] hole[20] into the search window. 28. Whats a response queue? Its the message queue that holds response messages sent from the receiving application to the sender.

29. Whats MQPing used for? Testing Microsoft Message Queue services between the nodes on a network. 30. Which add-on package for Windows 2003 Server would you use to monitor the installed
software and license compliance? SMS (System Management Server).

31. Which service do you use to set up various alerts? MOM (Microsoft Operations Manager).

What is a cluster a definition!


A cluster is a group of computers, called nodes that function as a single computer/system to provide high availability and high fault tolerance for applications or services. Windows 2003 Servers can participate in a cluster configuration through the use of Cluster Services. If one member of the cluster (the node) is unavailable, the other computers carry the load so that applications or services are always (with a small interruption) available. All nodes of the cluster use a Shared Disk an external disk or disk subsystem which is accessible for all nodes through SCSI (2 Nodes) or Fibre Channel (more than 2 nodes). All data will be stored on the shared disk or an external disk subsystem (for example Exchange databases). Every node has a local Exchange 2003 installation with a unique configuration for every cluster node. Each Cluster with Exchange 2003 has at a minimum one Exchange Virtual Server (EVS). An EVS is the logical node that will be used for all cluster operations. An EVS contains an IP address, network name, physical disk and an application. A cluster can be

Active/Active or Active/Passive

Microsoft recommends only Active/Passive clusters I will give you the reason later. The number of cluster nodes supported by Windows 2003 Enterprise and Datacenter is 8 nodes. Windows Server 2003 Standard and Web Editon doesnt support a Cluster.

In an Active/Passive cluster - If one node in the cluster fails, the active cluster failover to another node which becomes Active. This is called Failover. If the failed node is back online, a Failback can be manually initiated or automatically configured in the Cluster Group properties. Every cluster node must have two network interfaces. One network interface for the cluster communication called the private LAN and one network interface called the public LAN. You can link a cluster with two nodes with a simple cross link cable. If more than two nodes exist in the cluster you have to use a dedicated switch / hub. The private NIC is used for the Heartbeat communication (Cluster communication). A Heartbeat is much like a ping which can be used to test if the other cluster node is still available. If the heartbeat fails, the Failover process occurs.

Clustering changes with Exchange 2003 SP1


In versions before Exchange 2003 SP1, regardless of the number of cluster nodes you could only have one instance of a Public Folder store that is associated with the MAPI folder tree. In Exchange 2003 SP1, the Exchange development team added the ability to have multiple MAPI Public Folder databases on a single multi node cluster. This support was added because the Exchange team saw that Outlook 2003 cached mode puts a greater load on Public Folders like the Outlook Address Book (the OAB will be loaded offline at the client). With the help of multiple Public Folder stores the load can be spread across these folders. This allows a better client performance.

Why Active/Active cluster is not recommended


Active / Active cluster is not recommended because of Virtual memory (VM) fragmentation. When two instances of the information store is running in one memory space, it might be possible that sufficient VM does not exist to bring the resource online during a failover/failback. For more information see here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;816893 There are three main concepts which reduce virtual memory fragmentation:

Decrease the number of dynamic allocations when the system is started Increase the size of the virtual address space Allocate similar size allocations from common regions of memory

Exchange Server 2003 Cluster Requirements

Microsoft Windows 2000 Advanced Server (up to two nodes)

Windows 2000 Datacenter Server (up to four nodes) Windows 2000 must have SP3 + 329938 hotfix or SP4 Windows Server 2003, Enterprise Edition (up to eight cluster nodes) Windows Server 2003, Datacenter Edition (up to eight cluster nodes) Hardware on cluster HCL Windows 2000 - Check lists for cluster service installation http://go.microsoft.com/fwlink/?LinkId=266 Windows Server 2003 http://go.microsoft.com/fwlink/?LinkId=17219 Microsoft Distributed Transaction Coordinator (MSDTC) installed

Exchange Server 2003 Cluster Setup Changes


Block removal of node if an EVS is running on the cluster The /disasterrecovery switched is blocked Prevent Exchange 2003 from being first non-legacy server in a Exchange 5.5 site By default, POP3 and IMAP4 resource not created (as part of the Trustworthy Computing initiative from Microsoft) Cluster service account doesnt requires Exchange full admin rights IPSEC is now supported between front-end servers and back-end clusters

Exchange Server 2003 Cluster Disk Changes


Windows 2003 clusters now support Volume Mount points to overcome the limits of traditional drive letter assignments. This new feature is very useful for four and eight node Exchange clusters because the traditional drive letter assignment in Exchange was very limited in cluster environments when multiple storage groups and stores where used.

Windows 2003 Cluster Setup


I will not explain every step for installing a Windows 2003 Cluster. For detailed information click the following link. I will show you only a few pictures.

Figure 1: Create a new Cluster The Windows 2003 Cluster administrator after successful installation.

Figure 2: Cluster Administrator

Exchange 2003 Cluster Setup


Before we install Exchange 2003, we must create a MS-DTC (Distribution Transaction Coordinator) resource. In Windows 2003, Microsoft recommends installing the DTC as a separate Cluster Group containing a Physical Disk, Network Name and IP address resource and then adding the MSDTC resource to the cluster group.

Ntfldr.exe is missing in win xp os what will you do?


boot from windows xp cd and go to recovery console mode give the administrator password c:\windows> prompt will come come out from widnows with the help of command c:\windiws>cd .. c:> go to cd prompt d: d:>cd i386 d:\i386>copy ntldr c: enter d:\i386>copy ntdetect.com c: enter restart u r computer

problem fix What is the Logical / Physical Structures of the AD Environment?


Physical structure(incudes only tangiable objects) includes - Domain controllers & Site Logical structure (incudes untangiable objects) logical structure of active directory includes Domain Tree Forest Organizational unit

If RID master is down,can domain user can login is domain ??

Yes, RID master is not related to user Authentication. If PDC is down then the users will not be able to login to Domain. A server that has RID master role only generates the unique IDs to the newly created objects. Hence if your RID master is down; no new objects could be created however the existing users would keep on getting authenticated as authentication is done via Kerberos v5 in server 2003 that does not include RIS master server.

what is in DNS?
domain name system (dns) is a services which is use to resolve the ip address to name and name to ip address.

Can I edit Schema....?

Yes, u can edit the Schema. For editing the schema the user must be member of Schema Admin Group. By Default the Schema console is not available.

what is the diffrence between 2000 to 2003

1. We cant rename domain in Win2k,u can rename in Win2k3 2. IIS 5.0 in Win2k and IIS 6.0 in Win2k3 3. No Volume Shadow Copying in Win2k, its available in Win2k3 4. Active Directory Federation Systems in Win2k3 Like that some other security features added in Win2k3, main features are above

what is the difference between dual core and core 2duo processor
Dual core means two processors on a single silicon chip whereas core 2 duo is the second version of dual core processor.

what is the difference between ddr1 and ddr2 and ddr3


ddr1 ram is 184 pins fsb of 333mhx and ddr2 is 240 pins and fsb of 666mhz and ddr 3 too is 240 and fsb of 1333mhz

What are the AD database types and its flow?


The Active Directory creates and stores four types of log files on the maintenance and management of transactions. These files are stored in %system/NTDS and include Transaction log files. The current transaction file is Edb.log, which by default contains information about recent transactions and is limited to 10MB. When this limit is reached, transaction files are automatically created with the name edbxxxxx.log (where x is a sequential number). They are retained until the transactions are committed to the Active Directory. Once every 12 hours, old previous transaction files are purged during a process known as garbage collection. If you do not want previous transaction files created, it is possible to set circular logging, in which the current file is overridden when it is filled. This action is not recommended because it could limit your ability to recover recent transactions. Checkpoint files. The checkpoint is Edb.chk, and it is used to list transactions that have been committed to the Active Directory and those that remain uncommitted. Each time a transaction is committed, it advances to the next entry. If all transactions are not committed at the time of shutdown, the checkpoint file is read when the system is rebooted, and all remaining transactions are then committed to the Active Directory. Reserved log files. The reserved log file can be a number sequence of logs, with a maximum size of 10MB, named res1.log, res2.log, and so on. These logs are used in place of the transaction log when the creation of a new log file is attempted, but insufficient disk space is available. When this occurs, the system will automatically shut down. Patch files. Patch files (with a .pat suffix) are used during the backup-and-restore process of the Active Directory. Database entries are sometimes divided during backup into what is known as split transactions. The patch

files are used to record these splits, and "patch" the transaction back together during restoration.

What is offline defragmentation in AD and how do we do it?

offline defragment is nothing but,just take the backup of ntds.dit and rebooot the server press f8 and go to directory service mode login as local admin password Note:In case if you not able to login in local admin reset the dsrm passowrd and try again. once u logged successfully in the local admin then go to->cmd-->type -->ntdsutil-->press enter type-->file and press enter once again type --info-->press enter Note:(file)This will cause NTDSUTIL to switch to the File Maintenance prompt (info)This will cause NTDSUTIL to display information about the size and location of the Active Directory database Now you can view the displays current information about the path and size of the Active Directory database and its log files Type compact to drive:\directory, and then press ENTER, where drive and directory is the path to the location you established the database,here you can specifiy any drive location and directory EX:Note You must specify a directory path. If the path contains any spaces, the entire path must be surrounded by quotation marks. For example, type: compact to "c:\new folder" or "D:\new folder" A new database named Ntds.dit is created in the path you specified If defragmentation succeeds without errors, follow the Ntdsutil.exe on-screen instructions. Delete all the log files in the log directory by typing the following command: del drive :\ pathToLogFiles \*.log Atlast you Copy the new Ntds.dit file over the old Ntds.dit file in the current Active Directory database Restart the computer normally.

How can you backup and restore DC?


BACKUP ========== 1.Open NTBACKUP by either going to Run, then NTBACKUP and pressing Enter or by going to Start -> Accessories -> System Tools. 2.If you are prompted by the Backup or Restore Wizard, I suggest you un-check the "Always Start in Wizard Mode" checkbox, and click on the Advanced Mode link. 3.Inside NTBACKUP's main window, click on the Backup tab.

4.Click to select the System State checkbox. Note you cannot manually select components of the System State backup. It's all or nothing. 5.Enter a backup path for the BKF file. If you're using a tape device, make sure NTBACKUP is aware and properly configured to use it. 6.Press Start Backup. 7.The Backup Job Information pops out, allowing you to configure a scheduled backup job and other settings. For the System State backup, do not change any of the other settings except the schedule, if so desired. When done, press Start Backup. 8.After a few moments of configuration tasks, NTBACKUP will begin the backup job. 9.When the backup is complete, review the output and close NTBACKUP. RESTORE ========= 1.Reboot the computer. 2.At the boot menu, select Windows 2000 Server. Dont press Enter. Instead, press F8 for advanced options. 3.Scroll down, and select Directory Services Restore Mode. 4.The computer will boot into a special safe mode and wont start the DS. Be aware that during this time the machine wont act as a DC and wont perform functions such as authentication. 1.Start NT Backup. 2.Select the Restore tab. 3.Select the backup media, and select System State. 4.Click Start Restore. 5.Click OK in the confirmation dialog box. After you restore the backup, reboot the computer and start in normal mode to use the restored information. The computer might hang after the restore completes.

DHCP Process and which Protocol DHCP uses?


The Dynamic Host Configuration Protocol (DHCP) is a computer networking protocol used by hosts (DHCP clients) to retrieve IP address assignments and other configuration information. DHCP Process fall into four basic phases: IP discovery IP lease offer IP request and IP lease acknowledgement. Protocol and Port DHCP uses the same two ports assigned by IANA for BOOTP: 67/udp for sending data to the server, and 68/udp for data to the client.

What Happens when RID Master Down?

Rid master is responsible in assinging a secure id to the objects in the domain , if your RID master is down your objects wont have secure or unique id and this will result

in conflicts between objects of different domains.

what are the bootable files in windows XP


ntldr ntdetect.com

boot.ini What is Domain?


A Windows Domain is a logical grouping of computers that share common security and user account information. This information is stored in a master directory database which resides on a Windows server designated as a domain

controller. what is mean by raid?


RAID stands for Redundant Array of Independent Disks and it basically involves combining two or more drives together to improve the performance and the fault tolerance. Combining two or more drives together also offers improved reliability and larger data volume sizes. A RAID distributes the data across several disks and the operating system considers this array as a single disk.

what is striping?
Striping is the automated process of writing data across multiple drives simulteneously. Striping is used to increase the performance of disk reads. When using striping, if you write a 5GB file across 5 drives, 1GB of data is written to each drive. Parallel reading of data from multiple disks can have a significant positive impact on performance, because the physical disk drive is most often the performance bottleneck.

IIS server Senario :One company hosted the website in that Active Directory server(No PDC etc..) is down and DNS server is down. weather user was able to access the website if yes how?
If the Pdc server is down and Dns is also down.User can access the website(IIS)because all data and informations can be Transferred to ADC Server after running few command on Pdc.

How to change the windows xp product key if wrongly installed with other product key but you have original product key? What you will do to Make your os as Genuine?

go to run and type %systemroot%\System32\oobe\msoobe.exe \a change your product key here. simple menthod but u should know the command.

how to configure additional domain controller in windows server 2003 in network & in backup?

The Windows Server 2003 operating system supports multi-master replicationall of a domains domain controllers can receive changes made to objects and can replicate those changes to all other domain controllers in that domain. By default, the first domain controller created

in a forest is a global catalog server, which contains a full replica of all objects in the directory for its domain and a partial replica of all objects stored in the directory of every other domain in the forest. Replicating Active Directory data among domain controllers provides benefits for information availability, fault tolerance, load balancing, and performance. In this step-by-step guide, you can take advantage of the greater fault tolerance provided in the multi-master model by installing multiple domain controllers. In the event a domain controller stops working, the availability of Active Directory is not compromised. If you want to create an additional domain controller in win server 2003 follow this procedure Note:-Before doing this procedure you need to make sure you have domain controller setup in your win server 2003 with DNS and you need to install DNS server and dont configure anything where you are going to add an additional domain controller. * Click Start, click Run, and then type dcpromo click ok * If you want to open the Active Directory Installation Wizard with the option to create an additional domain controller from restored backup files. dcpromo /adv * On the Operating System Compatibility page, read the information and then click Next. If this is the first time you have installed Active Directory on a server running Windows Server 2003, click Compatibility Help for more information. * On the Domain Controller Type page, click Additional domain controller for an existing domain, and then click Next. * On the Copying Domain Information page, do one of the following: Click Over the network, and then click Next. Click From these restored backup files, and type the location of the restored backup files, or click Browse to locate the restored files, and then click Next. * On the Network Credentials page, type the user name, password, and user domain of the user account you want to use for this operation, and then click Next. The user account must be a member of the Domain Admins group for the target domain.

* On the Database and Log Folders page, type the location in which you want to install the database and log folders, or click Browse to choose a location, and then click Next. * On the Shared System Volume page, type the location in which you want to install the Sysvol folder, or click Browse to choose a location, and then click Next. * On the Directory Services Restore Mode Administrator Password page, type and confirm the password that you want to assign to the Administrator account for this server, and then click Next. * Use this password when starting the computer in Directory Services Restore Mode. * Review the Summary page, and then click Next to begin the installation. * Restart your server now.

what is active directory ?

active directory is a directory service which contains all the information about network resources like users,groups and computers.it is a centralized managing system.

What are the roles must be on the same server?


Domain Naming Master and Global catalogue

What are the roles those must not be on the same Domain Controller?
Infrastructure Master and Global Catalogue

What is Global Catalogue?


This is a database on one or more domain controllers. Each copy of the database contains a replica of every object in the Active Directory but with a limited number of each object's attributes.

How to check the above roles to which server they have assigned?
Install support tools from CD Programssupport toolstoolscmd prompt (Go to the command prompt in this way only) At command prompt type netdom query fsmo

How to start/stop a service from command prompt?


Go to the command prompt, type Net start service name (To start a service) Net stop service name (To stop a service) Ex: net start netlogon

What is a Member server?

Member servers, which belong to a domain but do not contain a copy of the Active Directory data.

Who will replicate the Password changes?


PDC emulator (immediately it replicates to all the Domain Controllers)

How to convert from FAT to NTFS? Convertdri ve /fs:ntfs

What is WINS and what it does?


WINS stands for Windows Internet Naming Service. It resolves NETBIOS names to IP addresses. WINS is used only when you need to access the NETBIOS resources

How to take backup?


StartProgramsAccessoriesSystem tools backup click on backup tab There you can select the required one. The system state backup includes the following files

Boot files

Com+ class registration database Registry If the system is domain controller then apart from above files it takes backup of the following files also.

Active directory Sys vol


Note: If you want to restore the system state backup on a domain controller you have to

restart the computer in Directory Services restore mode, because you are restoring Active Directory when it is in active. If you want to restore Active Directory it should not be in active. If you restart the computer in Directory services restore mode the Active directory is not in active, so you can restore the Active directory. You can restore Active Directory in two ways Authoritative restore Non Authoritative restore Non Authoritative restore Restart the computer Press F8 to select Directory services restore mode Start ProgramsAccessories system tools Backup Click on restore tab Select the restore file Click on restore now Restart the computer Authoritative Restore mode Restart the computer Press F8 to select Directory services restore mode Start ProgramsAccessories system tools Backup Click on restore tab Select the restore file Click on restore now

Open command prompt Type ntdsutil Type authoritative restore Note: Here you can restore authoritatively entire database or a particular OU. But you cannot restore a particular object. Type restore sub tree distinguished name of OU Ex: research is a OU under yahoo.com, then you have to type distinguished name like ou=research, dc=yahoo, dc=com

Diagnostic Utilities a) PING b) finger c) hostname d) Nslookup e) ipconfig f) Netstat g) NBTStat h) Route i) Tracer j) ARP
PING:

Verifies that TCP/IP is configured and another host is available. FINGER: Retrieves system information from a remote computer that supports TCP/IP finger services HOSTNAME: It displays the host name. NSLOOKUP: Examines Entries in the DNS database, which pertains to a particular host or domain NETSTAT: Displays protocol statistics and the current state of TCP/IP concepts. NBTSTAT: Checks the state of current NetBIOS over TCP/IP connections, updates LMhosts cache or determines your registered name or scope ID. Route: Views or modifies the local routing table. TRACERT Verifies the route from the local host to remote host ARP Displays a cache of local resolved IP address to MAC address

What is native mode and what is mixed mode?


If some of your domain controller are Windows NT in the windows 2000 domain, that is called mixed mode. If you want to compatible with NT domain controller in windows 2000 domain you should be in mixed mode. If all of your domain controllers are windows 2000 then you can change mixed mode to native mode. After changing to native mode you will some extra functionality to secure your windows 2000 domain.

What is the BOOTP protocol used for, where might you find it in Windows network infrastructure?

Incomputing, Bootstrap Protocol, orBOOTP, is aUDP network protocol used by a network client to obtain its IP address automatically. This is usually done during thebootstrap process when a computer is starting up. The BOOTP servers assign the IP address to each client from a pool of addresses. We can find, Bootstrap Protocol in DHCP Pool configuration in CSCO Switchers and Router.

DNS Zones

A DNS server that has complete information for part of the DNS name space is said to be the authority for that part of the name space. This authoritative information is organized into units calledzones, which are the main units of replication in DNS. A zone contains one or more RRs for one or more related DNS domains. The following are the three DNS zone types implemented in Windows 2000: Standard Primary Holds the master copy of a zone and can replicate it to secondary zones. All changes to a zone are made on the standard primary. Standard Secondary Contains a read-only copy of zone information that can provide increased performance and resilience. Information in a primary zone is replicated to the secondary by use of the zone transfer mechanism. Active Directory-integrated A Microsoft proprietary zone type, where the zone information is held in the Windows 2000 Active Directory (AD) and replicated using AD replication.

S-ar putea să vă placă și