Tuesday 26 April 2011

Interview questions for windows 2003/2008, Active Directory,FSMO roles,Global catalog,Domain controller, forest


Question:-What is the family of Windows NT?
Windows NT Workstation (Desktop)
Windows NT 4.0 server (Server)
Windows NT4.0 Enterprise server (Server)
Question:-What is the family of Windows 2000?
Windows 2000 Professional (Desktop Operating System)
Windows 2000 Server (Server Operating System)
Window 2000 Advanced Server (Server Operating System)
Windows 2000 Data center Server (Server Operating System)

Question:- What is the family of Windows 2003 family?
Windows Server 2003, Web Edition
Windows Server 2003, Standard Edition
Windows Server 2003, Enterprise Edition
Windows server 2003, Data center Edition

Question:- What is the family of windows 2008 family?
Windows Server 2008 R2 Foundation
Windows Server 2008 R2 Standard
Windows Server 2008 R2 Enterprise
Windows Server 2008 R2 Datacenter
Windows Server 2008 R2 Web server
Windows HPC Server 2008 R2 Suite
Windows Server 2008 R2 for Itanium-Based Systems

Question:-What is the Difference between Desktop and Server?
Regular computers usually run some flavor of Windows, like XP or Vista. Macs of course run Mac software (OS X), and there are also open source desktop alternatives such as Linux.
Servers generally run more powerful operating systems that can handle networking, email, internet/intranet hosting, file sharing, databases, and more. Windows Server and Windows Small Business Server are quite popular in small and mid-size businesses. Mac offers OS X Server if you want to run your entire network on Macs.
The second major difference between computers and servers: better hardware. If a desktop goes down, it impacts a single person. If a server goes down, it can easily impact dozens, even hundreds of people at once. In server you can implement RAID at hardware and Software Raid fault tolerance and riddance.
Question: – What is the difference between a Workgroup and domain controller?
A workgroup is a distributed directory maintained on each computer with the workgroup with same workgroup name. A domain is a centralized directory of resources maintained on domain controllers and presented to the user through Active directory services so the user can get login from a single server.
Question: – What is a Stand-alone computer or server?
A computer that belongs to workgroup, not a domain is called a standalone server?
Question:- What is a Member server?
Member server is which belong to domain but do not contain a copy of the Active Directory data.
And it is not configured as a domain controller. A member server doesn’t store Active directory information and can’t authenticate users.  Member server can provide share resources such as share folder share Driver or Printers.
Question: -What is Active Directory?
Active Directory is a technology created by Microsoft that provides a variety of network services, and database that holds information about component locations, users, groups, passwords, security, Printers, computers, Group policy and other COM information. Some of this information is currently stored in the Registry, but will eventually (with Windows 2008) be moved to the Active Directory.
Question:-What roles does a Main Domain Controller will have by default?
By Default there are Five operation master roles :-
Schema maser
Domain Naming Master
PDC Emulator
Relative Identifier Master (RID)
Infrastructure Master

Question:- What are the roles an Additional Domain controller Will have by Default?
By default you cannot get any role. But if you want to assign any role you can transfer from master.

Question:- What are the roles a Main Child Domain Controller will have by default?
By default the FSMO roles the Child DC is having are
PDC Emulator
Relative Identifier (RID)
Infrastructure Master

Question:-Explain the FSMO roles and their activities?
Answer: The domain Operations Master Roles also known as FSMO roles, are the core foundations of the Active Directory infrastructure.
In each Active Directory domain we have five FSMO roles that can be assigned to one server or multiple servers.
These are the five FSMO Roles:
Schema Master
Controls updates and changes to our Active Directory schema.
The domain naming master domain controller controls the addition or removal of domains in the forest. This DC is the only one that can add or remove a domain from the directory. It can also add or remove cross references to domains in external directories. There can be only one domain naming master in the whole forest.
To find out which server hold this role issue the following command:
dsquery server –hasfsmo schema
Domain Naming Master
Controls new addition and removal of domains in the AD forest.
The domain naming master domain controller controls the addition or removal of domains in the forest. This DC is the only one that can add or remove a domain from the directory. It can also add or remove cross references to domains in external directories. There can be only one domain naming master in the whole forest.

To find out which server hold this role issue the following command:
dsquery server –hasfsmo name
Relative ID Master
Assigns security ID to each new object created in Active Directory like user, server, group, etc
The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. When a DC creates a security principal object such as a user or group, it attaches a unique Security ID (SID) to the object. This SID consists of a domain SID (the same for all SIDs created in a domain), and a relative ID (RID) that is unique for each security principal SID created in a domain.  Each DC in a domain is allocated a pool of RIDs that it is allowed to assign to the security principals it creates. When a DC’s allocated RID pool falls below a threshold, that DC issues a request for additional RIDs to the domain’s RID master. The domain RID master responds to the request by retrieving RIDs from the domain’s unallocated RID pool and assigns them to the pool of the requesting DC. At any one time, there can be only one domain controller acting as the RID master in the domain.
To find out which server hold this role issue the following command:
dsquery server –hasfsmo rid
PDC Emulator
Acts as the default time server for the domain and performs time sync with other time servers if needed.
The PDC emulator is necessary to synchronize time in an enterprise. Windows 2000/2003 includes the W32Time (Windows Time) time service that is required by the Kerberos authentication protocol. All Windows 2000/2003-based computers within an enterprise use a common time. The purpose of the time service is to ensure that the Windows Time service uses a hierarchical relationship that controls authority and does not permit loops to ensure appropriate common time usage.
The PDC emulator of a domain is authoritative for the domain. The PDC emulator at the root of the forest becomes authoritative for the enterprise, and should be configured to gather the time from an external source. All PDC FSMO role holders follow the hierarchy of domains in the selection of their in-bound time partner.
In a Windows 2000/2003 domain, the PDC emulator role holder retains the following functions:
  • Password changes performed by other DCs in the domain are replicated preferentially to the PDC emulator.
  • Authentication failures that occur at a given DC in a domain because of an incorrect password are forwarded to the PDC emulator before a bad password failure message is reported to the user.
  • Account lockout is processed on the PDC emulator.
  • Editing or creation of Group Policy Objects (GPO) is always done from the GPO copy found in the PDC Emulator’s SYSVOL share, unless configured not to do so by the administrator.
  • The PDC emulator performs all of the functionality that a Microsoft Windows NT 4.0 Server-based PDC or earlier PDC performs for Windows NT 4.0-based or earlier clients.
This part of the PDC emulator role becomes unnecessary when all workstations, member servers, and domain controllers that are running Windows NT 4.0 or earlier are all upgraded to Windows 2000/2003. The PDC emulator still performs the other functions as described in a Windows 2000/2003 environment.
At any one time, there can be only one domain controller acting as the PDC emulator master in each domain in the forest.
To find out which server hold this role issue the following command:
dsquery server –hasfsmo pdc
Infrastructure Master
Makes sure all objects references are up to data on all domain controllers and if not replicates the data.
When an object in one domain is referenced by another object in another domain, it represents the reference by the GUID, the SID (for references to security principals), and the DN of the object being referenced. The infrastructure FSMO role holder is the DC responsible for updating an object’s SID and distinguished name in a cross-domain object reference. At any one time, there can be only one domain controller acting as the infrastructure master in each domain.
Note: The Infrastructure Master (IM) role should be held by a domain controller that is not a Global Catalog server (GC). If the Infrastructure Master runs on a Global Catalog server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a Global Catalog server holds a partial replica of every object in the forest. As a result, cross-domain object references in that domain will not be updated and a warning to that effect will be logged on that DC’s event log. If all the domain controllers in a domain also host the global catalog, all the domain controllers have the current data, and it is not important which domain controller holds the infrastructure master role.
To find out which server hold this role issue the following command:
dsquery server –hasfsmo infr

Question:-What are the roles must be on the same server?
Domain Naming Master and Global catalogue

Question:-What are the roles should not on the same Domain Controller?
Infrastructure Master and Global Catalogue
Note: If you have only one domain then you won’t get any problem even if you have both of them in the same server. If you have two of more domains in a forest then they shouldn’t be in the same server.
Question:-What is a Global Catalogue?
The global catalog is the set of all objects in an Active Directory Domain Services (AD DS) forest. A global catalog server is a domain controller that stores a full copy of all objects in the directory for its host domain and a partial, read-only copy of all objects for all other domains in the forest. Global catalog servers respond to global catalog queries.

Question:-How to check the above roles to which server they have assigned?
Install support tools from Widows server CD
At command prompt type “netdom quary fsmo”

Question:-How to start/stop a service from command prompt?
Open command prompt type
“Net start  service name”   (To start a service)
“Net Stop  service name”   (To stop a service)
Question:-What are the file system we have in windows?
FAT/FAT16/FAT32/NTFS 4.0 /NTFS 5.0
Question:- How to convert from FAT to NTFS?
Convert drive /fs:ntfs

Question:-What is a forest?
Collection of one or more domain trees that do not form a contiguous namespace. Forests allow organizations to group divisions that operate  independently but still need to communicate with one another.
All trees in a forest share common schema, configuration partitions and Global Catalog. All trees in a give forest trust each other with two way transitive trust relations
Question:- What is Domain?
A group of computers that are part of a network and shares a common directory and security policies. In Windows server 2008 a domain is a security boundary and permissions that are granted in one domain are not carried over to other domains.
Question:- What is a fully Qualified Domain name?
Hostname.domainname.com  is known as FQDN

Question:-How many types of partitions are there in Windows?
There are Two types of partitions there:-
Primary Partition
Extended Partition.

Question:-What is the difference between primary and secondary partition?
A Primary partition or system partition is one on which you can install the files needed to load an operating system.
Question:- How many partition can you create maximum. How many primary and how many extended?
Maximum we can create four partitions in basic disk. Among that we can create maximum One extended partition. You can create four primary partitions if you do not have extended.
Question:-What is a volume?
Disk Volume is a way of dividing your Physical Disk so that each section functions as a separate unit.

Question:-How many types of volumes are there?
There are 5 types of volumes
Simple
Spanned
Striped (also called RAID 0)
Mirror (also called RAID 1)
RAID 5 (also called striped volumes with parity)
Question:-What is the difference between partition and volume?
You have limitations on number of partitions.
You don’t have limitations on number of volumes.
You cannot extend the size of a partition.
You can extend the size of a volume.

Question:-what is active partition?
The partition in which your current Operating System boob files are there.
Question:- What is system volume and boot volume?
The system volume is the one in which your boot files are there.
Whatever partition is marked as active that partition is called system partition.
The boot volume is the one in which your system files are there.

Question:-What are Unicast, Multicast and Broad cast?
Unicast:           Just from one computer to one computer.
Multicast:         Those who ever register for a particular multicast group to those only.
Broadcast:       To all the computers.

No comments:

Post a Comment

ADD