Windows Active Directory (AD) Interview Questions Page 1 of 3

TechieBird
Home | Windows | Network | Interview Questions | Database | Virtualization | Knowledge Base | Contact Us

Windows Server 2008 Active Directory Interview Questions !

Quick Links
>What is Active Directory ?
Windows 2003 KB Active Directory is a Meta Data. Active Directory is a data base which store a data base like your user
information, computer information and also other network object info. It has capabilities to manage and
Windows 2008 KB administor the complite Network which connect with AD.

Windows 2012 > What is Active Directory Domain Services ?

In Windows 2000 Server and Windows Server 2003, the directory service is named Active Directory. In
MS Cluster FAQ's Windows Server 2008 and Windows Server 2008 R2, the directory service is named Active Directory
Domain Services (AD DS). The rest of this topic refers to AD DS, but the information is also applicable to
Virtualization Active Directory.

Custom Servers Solutions

Command reference softlayer.com/dedicated-server
Exchange Q&A Secure, Reliable Dedicated Servers 24/7 Customer Support. 0% Downtime.

Linux Interview Q&A >What is domain ?

A domain is a set of network resources (applications, printers, and so forth) for a group of users. The
VM Interview Q&A user need only to log in to the domain to gain access to the resources, which may be located on a
number of different servers in the network. The 'domain' is simply your computer address not to
DNS FAQ's confused with an URL. A domain address might look something like 211.170.469.

DHCP FAQ's >What is domain controller ?

A Domain controller (DC) is a server that responds to security authentication requests (logging in,
checking permissions, etc.) within the Windows Server domain. A domain is a concept introduced in
Windows NT whereby a user may be granted access to a number of computer resources with the use of a
Active Directory FAQ's single username and password combination.

AD History >What is LDAP ?

Lightweight Directory Access Protocol LDAP is the industry standard directory access protocol, making
Configuring New Active Directory widely accessible to management and query applications. Active Directory supports
Domain LDAPv3 and LDAPv2.

>What is KCC ?
Deleted Object
KCC ( knowledge consistency checker ) is used to generate replication topology for inter site replication
Recovery in AD and for intrasite replication.with in a site replication traffic is done via remote procedure calls over ip,
while between site it is done through either RPC or SMTP.
Global Catalog Server
>Where is the AD database held? What other folders are related to AD?
The AD data base is store in c:\windows\ntds\NTDS.DIT.

NetDom Command >What is the SYSVOL folder?

The sysVOL folder stores the server's copy of the domain's public files. The contents such as group
Replmon Command policy, users etc of the sysvol folder are replicated to all domain controllers in the domain.

NTDS Utility Guide > What is the Netlogon folder use for?
Sysvol is an important component of Active Directory. The Sysvol folder is shared on an NTFS volume on
FSMO Guide all the domain controllers in a particular domain. Sysvol is used to deliver the policy and logon scripts to
domain members.
FSMO Failure
By default sysvol includes 2 folders,the scripts folder is shared with the name NETLOGON

1.Policies - (Default location - %SystemRoot%\Sysvol\Sysvol\domain_name\Policies)

Network Interview 2.Scripts - (Default lcation - %SystemRoot%\Sysvol\Sysvol\domain_name\Scripts)
Questions >What are the difference between Enterprise Admins and Domain Admins groups in AD ?
Enterprise Admins : Members of this group have full control of all domains in the forest. By default,
SQL Interview
this group is a member of the Administrators group on all domain controllers in the forest. By default,
Questions the Administrator account is a member of this group. Because this group has full control of the forest,
add users with caution.
Active Directory Trust
Domain Admins : Members of this group have full control of the domain. By default, this group is a
Group Policy Guide member of the Administrators group on all domain controllers, all domain workstations, and all domain
member servers at the time they are joined to the domain. By default, the Administrator account is a
IIS 6.0 member of this group. Because the group has full control in the domain, add users with caution.

http://www.techiebird.com/ad1.html 7/14/2014
Windows Active Directory (AD) Interview Questions Page 2 of 3

RAID Levels
Free EMA Analyst Report
RPC Guide
centrify.com
Domain & Forest How To Gain Control And Visibility Over Privileged Access. Free WP.
Functional Levels
>Where are the Windows NT Primary Domain Controller (PDC) and its Backup Domain
SQL Failover Cluster Controller (BDC) in Server 2003 ?
The Active Directory replaces them. Now all domain controllers share a multimaster peer-to-peer read
and write relationship that hosts copies of the Active Directory.

>I am trying to create a new universal user group. Why can’t I ?

Universal groups are allowed only in native-mode Windows Server 2003 environments. Native mode
requires that all domain controllers be promoted to Windows Server 2003 Active Directory.

>What is LSDOU ?
It’s group policy inheritance model, where the policies are applied toLocal machines, Sites, Domains
and Organizational Units.

>Why doesn’t LSDOU work under Windows NT ?

If the NTConfig.pol file exist, it has the highest priority among the numerous policies.

>What’s the number of permitted unsuccessful logons on Administrator account? Unlimited.

Remember, though, that it’s the Administrator account, not any account that’s part of the Administrators
group.

> What’s the difference between guest accounts in Server 2003 and other editions?
More restrictive in Windows Server 2003.

> How many passwords by default are remembered when you check "Enforce Password
History Remembered"?
User’s last 6 passwords.

> Can GC Server and Infrastructure place in single server If not explain why ?
No, As Infrastructure master does the same job as the GC. It does not work together.

> Which is service in your windows is responsible for replication of Domain controller to
another domain controller.
KCC generates the replication topology.
Use SMTP / RPC to replicate changes.

> What Intrasite and Intersite Replication ?

Intrasite is the replication with in the same site & intersite the replication between sites.

> What is lost & found folder in ADS ?

It’s the folder where you can find the objects missed due to conflict.
Ex: you created a user in OU which is deleted in other DC & when replication happed ADS didn’t find the
OU then it will put that in Lost & Found Folder.

Official HP® Online Store

hpshopping.in
Buy HP® Original Toner Cartridges. Free Same Day Delivery. Pay COD.

> What is Garbage collection ?

Garbage collection is the process of the online defragmentation of active directory. It happens every 12
Hours.

> What System State data contains ?

Contains Startup files,
Registry
Com + Registration Database
Memory Page file
System files
AD information
Cluster Service information
SYSVOL Folder

Continue Next Questions

Active Directory Home

AD Interview Questions And Answers

http://www.techiebird.com/ad1.html 7/14/2014
Windows Active Directory (AD) Interview Questions Page 3 of 3

Comments

Name

Enter your comment here




(June 24, 2014) sumi said:

nice

(June 12, 2014) Mani said:

Very precise question normally being asked during the interviews

(June 9, 2014) Ashok said:

Good ..usefu;

(June 8, 2014) Ranjan said:

Great tech Q even Answers also , Thanks a ton .......

(June 4, 2014) mohsin said:

Thanks

(Mar 3, 2014) Veera said:

Good Q and A

(Mar 3, 2014) vinay said:

thanks

(Feb 26, 2014) good info said:

good info

(Feb 24, 2014) madhan said:

Thank you for the useful information.......

(Feb 20, 2014) sivaji said:

very good stuff

(Showing 1 to 10)

Home | Windows | Network | Post Ur Issues | Database| Knowledge Base | Contact Us

Designed by TechieBird

http://www.techiebird.com/ad1.html 7/14/2014