Windows Admin Interview Questions
& Answer
Windows Admin Interview Questions & Answer
- What is Active Directory?
- What is LDAP?
- Can you connect Active Directory to other 3rd-party
Directory Services? Name a few options.
- Where is the AD database held? What other folders are
related to AD?
- What is the SYSVOL folder?
- Name the AD NCs and replication issues for each NC
- What are application partitions? When do I use them
- How do you create a new application partition
- How do you view replication properties for AD
partitions and DCs?
- What is the Global Catalog?
- How do you view all the GCs in the forest?
- Why not make all DCs in a large forest as GCs?
- Trying to look at the Schema, how can I do that?
- What are the Support Tools? Why do I need them?
- What is LDP? What is REPLMON? What is ADSIEDIT? What is
NETDOM? What is REPADMIN?
- What are sites? What are they used for?
- What’s the difference between a site link’s schedule
and interval?
- What is the KCC?
- What is the ISTG? Who has that role by default?
- What are the requirements for installing AD on a new
server?
- What can you do to promote a server to DC if you’re in
a remote location with slow WAN link?
- How can you forcibly remove AD from a server, and what
do you do later? • Can I get user passwords from the AD database?
- What tool would I use to try to grab security related
packets from the wire?
- Name some OU design considerations.
- What is tombstone lifetime attribute?
- What do you do to install a new Windows 2003 DC in a
Windows 2000 AD?
- What do you do to install a new Windows 2003 R2 DC in a
Windows 2003 AD?
- How would you find all users that have not logged on
since last month?
- What are the DS* commands?
- What’s the difference between LDIFDE and CSVDE? Usage
considerations?
What is the SYSVOL
folder?
The sysVOL folder stores
the server’s copy of the domain’s public files. The contents such as group
policy, users etc of the sysvol folder are replicated to all domain controllers
in the domain.
The sysvol folder must
be located on an NTFS volume.
Que.: What is Active
Directory?
Ans. Active Directory is
a Meta Data. Active Directory is a data base which store a data base like your
user information, computer information and also other network object info. It
has capabilities to manage and administor the complite Network which connect
with AD.
Que.: What is the Global
Catalog?
Ans.: Global Catalog is
a server which maintains the information about multiple domain with trust
relationship agreement..
Que: What is Active
Directory?
Ans: Active Directory directory service is an extensible and scalable directory service that enables you to manage network resources efficiently.
Ans: Active Directory directory service is an extensible and scalable directory service that enables you to manage network resources efficiently.
Q01: What is Active
Directory?
Ans:Active Directory is directory service that stores information about objects on a network and makes this information available to users and network administrators.
Active Directory gives network users access to permitted resources anywhere on the network using a single logon process.
It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration
3for all network objects.
Ans:Active Directory is directory service that stores information about objects on a network and makes this information available to users and network administrators.
Active Directory gives network users access to permitted resources anywhere on the network using a single logon process.
It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration
3for all network objects.
Q; What is active
directory?
Ans: active directory is
a domain controller which is use to authenticate and administrate the group of
computer,user,server etc. remotely. all the policies and security will be applicable
on the client machine which one is join the domain.and all this policies and
security is defined in active directory.
Q2: What is LDAP?
Ans2: LDAP(light weight directory accerss protocol) is an internet protocol which Email and other services is used to look up information from the server.
Ans2: LDAP(light weight directory accerss protocol) is an internet protocol which Email and other services is used to look up information from the server.
Q 18: What is KCC ?
Ans 18: KCC ( knowledge consistency checker ) is used to generate replication topology for inter site replication and for intrasite replication.with in a site replication traffic is done via remote procedure calls over ip, while between site it is done through either RPC or SMTP.
Ans 18: KCC ( knowledge consistency checker ) is used to generate replication topology for inter site replication and for intrasite replication.with in a site replication traffic is done via remote procedure calls over ip, while between site it is done through either RPC or SMTP.
Q 10: What is Global Catalog Server ?
Ans 10 : Global Catalog Server is basically a container where you put the same type of member ,computer etc and applied the policies and security on the catalog server in place of individual user or computer.
Q; What is active
directory?
active directory is a domain controller which is use to authenticate and administrate the group of computer,user,server etc. remotely. all the policies and security will be applicable on the client machine which one is join the domain.and all this policies and security is defined in active directory.
active directory is a domain controller which is use to authenticate and administrate the group of computer,user,server etc. remotely. all the policies and security will be applicable on the client machine which one is join the domain.and all this policies and security is defined in active directory.
Q 10 : what is Global
catalog server GC?
Ans : i m sorry i was given wrong ans of this question above but now im giving the exact ans of this question, and th ans which iwas given previously is the ans of Organisatinal Unit not of GC….. and the ans is
Ans : i m sorry i was given wrong ans of this question above but now im giving the exact ans of this question, and th ans which iwas given previously is the ans of Organisatinal Unit not of GC….. and the ans is
The global catalog is a
distributed data repository that contains a searchable, partial representation
of every object in every domain in a multidomain Active Directory forest. The
global catalog is stored on domain controllers that have been designated as
global catalog servers and is distributed through multimaster replication.
Searches that are directed to the global catalog are faster because they do not
involve referrals to different domain controllers.
Q 4: Where is the AD
database held? What other folders are related to AD?
A 4: The AD data base is
store in NTDS.DIT.
Q 5 : What is the SYSVOL folder?
A 5; The sysVOL folder stores the server’s copy of the domain’s public files. The contents such as group policy, users etc of the sysvol folder are replicated to all domain controllers in the domain.
Q 5 : What is the SYSVOL folder?
A 5; The sysVOL folder stores the server’s copy of the domain’s public files. The contents such as group policy, users etc of the sysvol folder are replicated to all domain controllers in the domain.
Q 19: What is the ISTG?
Who has that role by default?
A 19: Windows 2000
Domain controllers each create Active Directory Replication connection objects
representing inbound replication from intra-site replication partners. For
inter-site replication, one domain controller per site has the responsibility
of evaluating the inter-site replication topology and creating Active Directory
Replication Connection objects for appropriate bridgehead servers within its
site. The domain controller in each site that owns this role is referred to as
the Inter-Site Topology Generator (ISTG).
Q :15 What is LDP? What
is REPLMON? What is ADSIEDIT? What is NETDOM? What is REPADMIN?
A 15 : LDP : Label Distribution Protocol (LDP) is often used to establish MPLS LSPs when traffic engineering is not required. It establishes LSPs that follow the existing IP routing, and is particularly well suited for establishing a full mesh of LSPs between all of the routers on the network.
Replmon : Replmon displays information about Active Directory Replication.
ADSIEDIT :ADSIEdit is a Microsoft Management Console (MMC) snap-in that acts as a low-level editor for Active Directory. It is a Graphical User Interface (GUI) tool. Network administrators can use it for common administrative tasks such as adding, deleting, and moving objects with a directory service. The attributes for each object can be edited or deleted by using this tool. ADSIEdit uses the ADSI application programming interfaces (APIs) to access Active Directory. The following are the required files for using this tool: ADSIEDIT.DLL
ADSIEDIT.MSCNETDOM : NETDOM is a command-line tool that allows management of Windows domains and trust relationships. It is used for batch management of trusts, joining computers to domains, verifying trusts, and secure channels.
REPADMIN :
This command-line tool assists administrators in diagnosing replication problems between Windows domain controllers.Administrators can use Repadmin to view the replication topology (sometimes referred to as RepsFrom and RepsTo) as seen from the perspective of each domain controller. In addition, Repadmin can be used to manually create the replication topology (although in normal practice this should not be necessary), to force replication events between domain controllers, and to view both the replication metadata and up-to-dateness vectors.
This command-line tool assists administrators in diagnosing replication problems between Windows domain controllers.Administrators can use Repadmin to view the replication topology (sometimes referred to as RepsFrom and RepsTo) as seen from the perspective of each domain controller. In addition, Repadmin can be used to manually create the replication topology (although in normal practice this should not be necessary), to force replication events between domain controllers, and to view both the replication metadata and up-to-dateness vectors.
Q 36: how to
take backup of AD ?
A 36 : for taking backup of active directory you have to do this :
first go to START -> PROGRAM ->ACCESORIES -> SYSTEM TOOLS -> BACKUP
when the backup screen is flash then take the backup of SYSTEM STATE it will take the backup of all the necessary information about the syatem including AD backup , DNS ETC.
A 36 : for taking backup of active directory you have to do this :
first go to START -> PROGRAM ->ACCESORIES -> SYSTEM TOOLS -> BACKUP
when the backup screen is flash then take the backup of SYSTEM STATE it will take the backup of all the necessary information about the syatem including AD backup , DNS ETC.
Q 37 : how to
restore the AD ?
a 37 : For ths do the same as above in the question 36 but in place of backup you select the restore option and restore the system state .
a 37 : For ths do the same as above in the question 36 but in place of backup you select the restore option and restore the system state .
Q 19: What is the ISTG?
Who has that role by default?
A 19: Inter-Site Topology Generator(istg) is responsible for managing the inbound replication connection objects for all bridgehead servers in the site in which it is located. This domain controller is known as the Inter-Site Topology Generator (ISTG). The domain controller holding this role may not necessarily also be a bridgehead server.
A 19: Inter-Site Topology Generator(istg) is responsible for managing the inbound replication connection objects for all bridgehead servers in the site in which it is located. This domain controller is known as the Inter-Site Topology Generator (ISTG). The domain controller holding this role may not necessarily also be a bridgehead server.
Q 29 :What are the DS*
commands
A 29 : You really are
spoilt for choice when it comes to scripting tools for creating Active
Directory objects. In addition to CSVDE, LDIFDE and VBScript, we now have
the following DS commands: the da family built in utility DSmod - modify
Active Directory attributesDSrm - to delete Active Directory objectsDSmove - to
relocate objectsDSadd - create new accountsDSquery - to find objects that match
your query attributesDSget - list the properties of an object
Q 30 :What’s the
difference between LDIFDE and CSVDE? Usage considerations?
A 30 : CSVDE is a command that can be used to import and export objects to and from the AD into a CSV-formatted file. A CSV (Comma Separated Value) file is a file easily readable in Excel. I will not go to length into this powerful command, but I will show you some basic samples of how to import a large number of users into your AD. Of course, as with the DSADD command, CSVDE can do more than just import users. Consult your help file for more info.
Like CSVDE, LDIFDE is a command that can be used to import and export objects to and from the AD into a LDIF-formatted file. A LDIF (LDAP Data Interchange Format) file is a file easily readable in any text editor, however it is not readable in programs like Excel. The major difference between CSVDE and LDIFDE (besides the file format) is the fact that LDIFDE can be used to edit and delete existing AD objects (not just users), while CSVDE can only import and export objects.
A 30 : CSVDE is a command that can be used to import and export objects to and from the AD into a CSV-formatted file. A CSV (Comma Separated Value) file is a file easily readable in Excel. I will not go to length into this powerful command, but I will show you some basic samples of how to import a large number of users into your AD. Of course, as with the DSADD command, CSVDE can do more than just import users. Consult your help file for more info.
Like CSVDE, LDIFDE is a command that can be used to import and export objects to and from the AD into a LDIF-formatted file. A LDIF (LDAP Data Interchange Format) file is a file easily readable in any text editor, however it is not readable in programs like Excel. The major difference between CSVDE and LDIFDE (besides the file format) is the fact that LDIFDE can be used to edit and delete existing AD objects (not just users), while CSVDE can only import and export objects.
Q 25 : What is tombstone
lifetime attribute?
A 25 : The number of
days before a deleted object is removed from the directory services. This
assists in removing objects from replicated servers and preventing restores
from reintroducing a deleted object. This value is in the Directory Service
object in the configuration NIC.
You want to standardize
the desktop environments (wallpaper, My Documents, Start menu, printers etc.)
on the computers in one department. How would you do that? How it is possibal
(20)What are the
requirements for installing AD on a new server?
Ans:1)The Domain structure2)The Domain Name3)storage location of the database and log file4)Location of the shared system volume folder5)DNS config Methode6)DNS configuration
Ans:1)The Domain structure2)The Domain Name3)storage location of the database and log file4)Location of the shared system volume folder5)DNS config Methode6)DNS configuration
7. What are application
partitions? When do I use them.
Ans: AN application
diretcory partition is a directory partition that is replicated only to
specific domain controller.Only domain controller running windows Server 2003
can host a replica of application directory partition.
Using an application
directory partition provides redundany,availabiltiy or fault tolerance by
replicating data to specific domain controller pr any set of domain controllers
anywhere in the forest
Q:You want to
standardize the desktop environments (wallpaper, My Documents, Start menu,
printers etc.) on the computers in one department. How would you do that? How
it is possibal.
Ans:Login on client as
Domain Admin user change whatever you need add printers etc go to system-User
profiles copy this user profile to any location by select Everyone in permitted
to use after copy change ntuser.dat to ntuser.man and assgin this path under
user profile
Q. 8. How do you create
a new application partition
ANS:
Use the DnsCmd command to create an application directory partition. To do this, use the following syntax:
DnsCmd ServerName /CreateDirectoryPartition FQDN of partition
Use the DnsCmd command to create an application directory partition. To do this, use the following syntax:
DnsCmd ServerName /CreateDirectoryPartition FQDN of partition
Global catalog provides
a central repository of domain information for the forest by storing partial
replicas of all domain directory partitions. These partial replicas are
distributed by multimaster replication to all global catalog servers in a
forest.
How do you view all the
GCs in the forest?
Ans
C:\>repadmin /showreps
domain_controller
where domain_controller is the DC you want to query to determine whether it’s a GC. The output will include the text DSA Options: IS_GC if the DC is a GC. . . .
C:\>repadmin /showreps
domain_controller
where domain_controller is the DC you want to query to determine whether it’s a GC. The output will include the text DSA Options: IS_GC if the DC is a GC. . . .
Trying to look at the
Schema, how can I do that
Ans:
type “adsiedit.msc” in run or command prompt
type “adsiedit.msc” in run or command prompt
Q. Can you connect
Active Directory to other 3rd-party Directory Services? Name a few options.
Ans. Yes, you can use
dirXML or LDAP to connect to other directories
In Novell you can use
E-directory
Q 38 :How do you change
the DS Restore admin password ?
Ans 38: A. In Windows
2000 Server, you used to have to boot the computer whose password you wanted to
change in Directory Restore mode, then use either the Microsoft Management
Console (MMC) Local User and Groups snap-in or the command
net user administrator *
to change the Administrator password. Win2K Server Service Pack 2 (SP2) introduced the Setpwd utility, which lets you reset the Directory Service Restore Mode password without having to reboot the computer. (Microsoft refreshed Setpwd in SP4 to improve the utility’s scripting options.)
In Windows Server 2003, you use the Ntdsutil utility to modify the Directory Service Restore Mode Administrator password. To do so, follow these steps:
1. Start Ntdsutil (click Start, Run; enter cmd.exe; then enter ntdsutil.exe).
2. Start the Directory Service Restore Mode Administrator password-reset utility by entering the argument “set dsrm password” at the ntdsutil prompt:
ntdsutil: set dsrm password
3. Run the Reset Password command, passing the name of the server on which to change the password, or use the null argument to specify the local machine. For example, to reset the password on server thanos, enter the following argument at the Reset DSRM Administrator Password prompt:
Reset DSRM Administrator Password: reset password on server thanos
To reset the password on the local machine, specify null as the server name:
Reset DSRM Administrator Password: reset password on server null
4. You’ll be prompted twice to enter the new password. You’ll see the following messages:
5. Please type password for DS Restore Mode Administrator Account:
6. Please confirm new password:
Password has been set successfully.
7. Exit the password-reset utility by typing “quit” at the following prompts:
8. Reset DSRM Administrator Password: quit
ntdsutil: quit
net user administrator *
to change the Administrator password. Win2K Server Service Pack 2 (SP2) introduced the Setpwd utility, which lets you reset the Directory Service Restore Mode password without having to reboot the computer. (Microsoft refreshed Setpwd in SP4 to improve the utility’s scripting options.)
In Windows Server 2003, you use the Ntdsutil utility to modify the Directory Service Restore Mode Administrator password. To do so, follow these steps:
1. Start Ntdsutil (click Start, Run; enter cmd.exe; then enter ntdsutil.exe).
2. Start the Directory Service Restore Mode Administrator password-reset utility by entering the argument “set dsrm password” at the ntdsutil prompt:
ntdsutil: set dsrm password
3. Run the Reset Password command, passing the name of the server on which to change the password, or use the null argument to specify the local machine. For example, to reset the password on server thanos, enter the following argument at the Reset DSRM Administrator Password prompt:
Reset DSRM Administrator Password: reset password on server thanos
To reset the password on the local machine, specify null as the server name:
Reset DSRM Administrator Password: reset password on server null
4. You’ll be prompted twice to enter the new password. You’ll see the following messages:
5. Please type password for DS Restore Mode Administrator Account:
6. Please confirm new password:
Password has been set successfully.
7. Exit the password-reset utility by typing “quit” at the following prompts:
8. Reset DSRM Administrator Password: quit
ntdsutil: quit
Q.40: What are Group
Policy objects (GPOs)?
A.40: Group Policy objects, other than the local Group Policy object, are virtual objects. The policy setting information of a GPO is actually stored in two locations: the Group Policy container and the Group Policy template. The Group Policy container is an Active Directory container that stores GPO properties, including information on version, GPO status, and a list of components that have settings in the GPO. The Group Policy template is a folder structure within the file system that stores Administrative Template-based policies, security settings, script files, and information regarding applications that are available for Group Policy Software Installation. The Group Policy template is located in the system volume folder (Sysvol) in the \Policies subfolder for its domain.
A.40: Group Policy objects, other than the local Group Policy object, are virtual objects. The policy setting information of a GPO is actually stored in two locations: the Group Policy container and the Group Policy template. The Group Policy container is an Active Directory container that stores GPO properties, including information on version, GPO status, and a list of components that have settings in the GPO. The Group Policy template is a folder structure within the file system that stores Administrative Template-based policies, security settings, script files, and information regarding applications that are available for Group Policy Software Installation. The Group Policy template is located in the system volume folder (Sysvol) in the \Policies subfolder for its domain.
Q 41 :What is the order
in which GPOs are applied ?
A 41: Group Policy
settings are processed in the following order:
1.
Local Group Policy object—Each computer has exactly one Group Policy object that is stored locally. This processes for both computer and user Group Policy processing.
Local Group Policy object—Each computer has exactly one Group Policy object that is stored locally. This processes for both computer and user Group Policy processing.
2.
Site—Any GPOs that have been linked to the site that the computer belongs to are processed next. Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the site in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed last, and therefore has the highest precedence.
Site—Any GPOs that have been linked to the site that the computer belongs to are processed next. Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the site in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed last, and therefore has the highest precedence.
3.
Domain—Processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence.
Domain—Processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence.
4.
Organizational units—GPOs that are linked to the organizational unit that is highest in the Active Directory hierarchy are processed first, then GPOs that are linked to its child organizational unit, and so on. Finally, the GPOs that are linked to the organizational unit that contains the user or computer are processed.
Organizational units—GPOs that are linked to the organizational unit that is highest in the Active Directory hierarchy are processed first, then GPOs that are linked to its child organizational unit, and so on. Finally, the GPOs that are linked to the organizational unit that contains the user or computer are processed.
At the level of each
organizational unit in the Active Directory hierarchy, one, many, or no GPOs
can be linked. If several GPOs are linked to an organizational unit, their
processing is in the order that is specified by the administrator, on the
Linked Group Policy Objects tab for the organizational unit in GPMC. The GPO
with the lowest link order is processed last, and therefore has the highest
precedence.
This order means that
the local GPO is processed first, and GPOs that are linked to the
organizational unit of which the computer or user is a direct member are
processed last, which overwrites settings in the earlier GPOs if there are
conflicts. (If there are no conflicts, then the earlier and later settings are
merely aggregated.)
What is LDAP?
Lightweight Directory
Access Protocol
This article will tell
you how to add your first Windows 2003 DC to an existing Windows 2000 domain.
This article is particularly useful if you have Windows 2000 servers that will
be replaced by new hardware running Windows Server 2003.
The first step is to
install Windows 2003 on your new DC. This is a straighforward process, so we
aren’t going to discuss that here.
Because significant
changes have been made to the Active Directory schema in Windows 2003, we need
to make our Windows 2000 Active Directory compatible with the new version. If
you already have Windows 2003 DCs running with Windows 2000 DCs, then you can
skip down to the part about DNS.
Before you attempt this
step, you should make sure that you have service pack 4 installed on your
Windows 2000 DC. Next, make sure that you are logged in as a user that is a
member of the Schema Admin and Enterprise Admin groups. Next, insert the
Windows 2003 Server installation CD into the Windows 2000 Server. Bring up a
command line and change directories to the I386 directory on the installation
CD. At the command prompt, type:
Code :
Code :
adprep /forestprep
After running this
command, make sure that the updates have been replicated to all existing Windows
2000 DCs in the forest.
Next, we need to run the
following command:
Code :
Code :
adprep /domainprep
The above command must
be run on the Infrastructure Master of the domain by someone who is a member of
the Domain Admins group.
Once this is complete,
we move back to the Windows 2003 Server. Click ’start’ then ‘run” - type in
dcpromo and click OK. During the ensuing wizard, make sure that you select that
you are adding this DC to an existing domain.
After this process is
complete, the server will reboot. When it comes back online, check and make
sure that the AD database has been replicated to your new server.
Next, you will want to
check and make sure that DNS was installed on your new server. If not, go to
the control panel, click on ‘Add or Remove Programs’, and click the ‘Add/Remove
Windows Components’ button. In the Windows Components screen, click on
‘Networking Services’ and click the details button. In the new window check
‘Domain Name System (DNS)’ and then click the OK button. Click ‘Next’ in the
Windows Components screen. This will install DNS and the server will reboot.
After reboot, pull up the DNS Management window and make sure that your DNS
settings have replicated from the Windows 2000 Server. You will need to
re-enter any forwarders or other properties you had set up, but the DNS records
should replicate on their own.
The next 2 items, global
catalog and FSMO roles, are important if you plan on decomissioning your
Windows 2000 server(s). If this is the case, you need to transfer the global
catalog from the old server to the new one.
First, let’s create a
global catalog on our new server. Here are the steps:
1. On the domain controller where you want the new global catalog, start the Active Directory Sites and Services snap-in. To start the snap-in, click ‘Start’, point to ‘Programs’, point to ‘Administrative Tools’, and then click ‘Active Directory Sites and Services’.
1. On the domain controller where you want the new global catalog, start the Active Directory Sites and Services snap-in. To start the snap-in, click ‘Start’, point to ‘Programs’, point to ‘Administrative Tools’, and then click ‘Active Directory Sites and Services’.
2. In the console tree,
double-click ‘Sites’, and then double-click ’sitename’.
3. Double-click
‘Servers’, click your domain controller, right-click ‘NTDS Settings’, and then
click ‘Properties’.
4. On the General tab,
click to select the Global catalog check box to assign the role of global
catalog to this server.
5. Restart the domain
controller.
Make sure you allow
sufficient time for the account and the schema information to replicate to the
new global catalog server before you remove the global catalog from the
original DC or take the DC offline.
After this is complete,
you will want to transfer or seize the FSMO roles for your new server. For
instructions, read Using Ntdsutil.exe to transfer or seize FSMO roles to a
domain controller.
After this step is
complete, we can now run DCPROMO on the Windows 2000 Servers in order to demote
them. Once this is complete, copy over any files you need to your new server
and you should have successfully replaced your Windows 2000 server(s) with a
new Windows 2003 server(s
Global Catalyst is the
one where the authentication happens, by default primary domain controller is
Global Catalyst, we can add global catalyst to improve the Netwrk Performance
What is Active
Directory?
Its a Directory Service
which stores and manages the information of Objects(User,computer,printer
shared folder etc)
What are the
requirements for installing AD on a new server?
Win2K3 CD
DNS
Static IP
Win2K3 CD
DNS
Static IP
You want to standardize
the desktop environments (wallpaper, My Documents, Start menu, printers etc.)
on the computers in one department. How would you do that?
go to Start->programs->Administrative
tools->Active Directory Users and Computers
Right Click on Domain->click on preoperties
On New windows Click on Group Policy
Select Default Policy->click on Edit
on group Policy console
go to User Configuration->Administrative Template->Start menu and Taskbar
Select each property you want to modify and do the same
Right Click on Domain->click on preoperties
On New windows Click on Group Policy
Select Default Policy->click on Edit
on group Policy console
go to User Configuration->Administrative Template->Start menu and Taskbar
Select each property you want to modify and do the same
- What are the required components of Windows Server 2003
for installing Exchange 2003? -
ASP.NET, SMTP, NNTP, W3SVC
- What must be done to an AD forest before Exchange can
be deployed? - Setup /forestprep
- What Exchange process is responsible for communication
with AD? - DSACCESS
- What 3 types of domain controller does Exchange access? - Normal Domain Controller, Global Catalog,
Configuration Domain Controller
- What connector type would you use to connect to the
Internet, and what are the two methods of sending mail over that
connector? - SMTP Connector: Forward
to smart host or use DNS to route to each address
- How would you optimise Exchange 2003 memory usage on a
Windows Server 2003 server with more than 1Gb of memory? - Add /3Gb switch to boot.ini
- What would a rise in remote queue length generally
indicate? - This means mail is not
being sent to other servers. This can be explained by outages or
performance issues with the network or remote servers.
- What would a rise in the Local Delivery queue generally
mean? - This indicates a
performance issue or outage on the local server. Reasons could be slowness
in consulting AD, slowness in handing messages
off to local delivery or SMTP delivery. It could also be databases being
dismounted or a lack of disk space.
- What are the standard port numbers for SMTP, POP3,
IMAP4, RPC, LDAP and Global Catalog? -
SMTP – 25, POP3 – 110, IMAP4 – 143, RPC – 135, LDAP – 389, Global Catalog
- 3268
- Name the process names for the following: System
Attendant? – MAD.EXE, Information Store
– STORE.EXE, SMTP/POP/IMAP/OWA – INETINFO.EXE
- What is the maximum amount of databases that can be
hosted on Exchange 2003 Enterprise? -
20 databases. 4 SGs x 5 DBs.
- What are the disadvantages of circular logging? - In the event of a corrupt database, data can
only be restored to the last backup.
19 Responses to “Windows sysadmin interview questions”
1) How windows server
will configure?
Tell them that you have
400 pc based network, and you configure a Active Directory domain on windows
servers to centralize administration tasks.
1) How windows server
will configure?
Its depends on the role
of the server. If you installing Active Directory, you have to run DCPROMO on
commond prompt, and followed instructions.
Over all its depends on
the role.
Simply you can say–
there is an option in windows “Manage Server” once you follow the instructions
it will guide you to configure your server.
2) How many types of
servers?
If they are concern with
Hardware server, tell them the hardware configuration and vendor of the server.
If they are asking about
the types of windows server, tell them Standard, enterprise, or Small business
server etc.
start > Run > Cmd
>
Type
net send Computername
type ur msg
Question 2: What must be
done to an AD forest before Exchange can be deployed? - Setup /forestprep
question 2 is incorrect,
in order for ms exchange 2k or 2003 to be sucessfully “deployed” both
forestprep and domain prep must successfuly complete first, before the
setup.exe of the actual exchange install, or the install and will error out if
attempted.
.How windows server will
configure?.
2.How many types of server?.
3.What is the server evnverment?.
2.How many types of server?.
3.What is the server evnverment?.
I faced one interview
they asked how many types of server in your company, how u configured.
Please guide me in this
mater
1) How to migrate from
windows 2000 to 2003 without distrubing the existing Domain ?????????
2) How to migrage from
Ms. Exchange 2000 to 2003 and how to configure Outlook Web Access ????????
3) What r the ports to
required to configure to Exchange Server ????????
4) What is IIS and how to
migrate from IIS 5.0 to IIS 6.0 ??
1) What r the frequently
asked questions on ADS 2003. and what r the main differences between ADS 2000
and 2003 ????????
2) What are main
differences between WINS and DNS ???
3) Why we have to go to
DNS what r the advantages in DNS ???????
4) What r the frequently
asked questions on DNS ????
5) What r the frequently
asked questions on DHCP ????
6) What r the frequently
asked questions FTP ????
7) What r the frequently
asked questions on DFS ????
8) What r the frequently
asked questions on File Server ??????????
9) What r the frequently
asked questions on Print Server ?????????
1.In windows2000
perfosonal or winxp pc perfomance is very low what is the solution you will
give?
2. what is diffrent
between AD2000 & AD2003?
3. what is different
between windows2000 & NT & winxp?
What r the frequently
asked questions on ADS 2003. and what r the main differences between ADS 2000
and 2003 ????????
2) What are main
differences between WINS and DNS ???
3) Why we have to go to
DNS what r the advantages in DNS ???????
4) What r the frequently
asked questions on DNS ????
5) What r the frequently
asked questions on DHCP ????
6) What r the frequently
asked questions FTP ????
7) What r the frequently
asked questions on DFS ????
8) What r the frequently
asked questions on File Server ??????????
9) What r the frequently
asked questions on Print Server ?????????
XP
1.Firewall
2.Automatic update
3.Media Player 9 is
support to DVD
4.Visual style
5.Remote Desktop
6.On Screen Board
7.Program Capability
wizard
8 etc………………..
Question asked @
interview
what is use of NTLDR
file
where its location
what will you do if
error occure”ntldr missing”
what would be the
poroblem if my mails not outgoing.
what are the protocols
use by outlook.
what are diff between
outlook & outlook express.
most of these are
terrible questions for a general windows/AD sysadmin. They’re bookish, not
realistic; the kind of thing one looks up if one doesn’t use every day.
Also, too many of the
questions are focused on exchange. For example, we outsource exchange, so a
windows sysadmin here wouldn’t be asked any of those questions…
What are main
differences between WINS and DNS ???
WINS:- It is used to
resolve IP address into netbios Viceversa it is used prior version of win 2000
DNS:-It is used to
resolve IP address into host name.Viceversa it is used in 2000, XP, 2003 server
what are diff between
outlook & outlook express ????
Outlook Express
Outlook Express is the
e-mail client that is included with Microsoft Internet Explorer 4.x, Microsoft
Internet Explorer 5.x, the Microsoft Windows 98 operating system, the Microsoft
Windows Millennium Edition (Me) operating system, the Microsoft Windows 2000
operating systems, and Microsoft Office 98 for the Macintosh. Outlook Express
is designed for home users who gain access to their e-mail messages by dialing
in to an Internet service provider (ISP).
Outlook
Outlook is Microsoft’s
premier messaging and collaboration client. It is a stand-alone application
that is integrated into Microsoft Office and Exchange Server. Outlook also
provides performance and integration with Internet Explorer 5.5. Complete
integration of e-mail, calendaring, and contact management, makes Outlook the
perfect client for many business users.
Advantages of WINS: WINS
will be really helofull in a multidomain environment where in user’s would need
to access many of the resources in different domains, rathere than adding
different DNS suffixes of each domain on the local machine. WINS is the best
option. But i could also say WINS is not as stable as DNS.
Windows
sysadmin interview questions
- What is Active Directory schema?
- What are the domain functional level in Windows Server
2003?
- What are the forest functional level in Windows Server
2003?
- What is global catalog server?
- How we can raise domain functional & forest
functional level in Windows Server 2003?
- Which is the deafult protocol used in directory
services?
- What is IPv6?
- What is the default domain functional level in Windows
Server 2003?
- What are the physical & logical components of ADS
- In which domain functional level, we can rename domain
name?
- What is multimaster replication?
- What is a site?
- Which is the command used to remove active directory
from a domain controler?
- How we can create console, which contain schema?
- What is trust?
- What is the file that’s responsible for keep all Active
Directory database?
Windows Server and MS Exchange interview questions
- What is DHCP? How we configure DHCP?
- What are the ways to configure DNS & Zones?
- What are the types of backup? Explain each?
- What are Levels of RAID 0, 1, 5? Which one is better
& why?
- What are FMSO Roles? List them.
- Describe the lease process of the DHCP server.
- Disaster Recovery Plan?
- What is scope & super scope?
- Differences between Win 2000 Server & Advanced
Server?
- Logical Diagram of Active Directory? What is the
difference between child domain & additional domain server?
- FTP, NNTP, SMTP, KERBEROS, DNS, DHCP, POP3 port
numbers?
- What is Kerberos? Which version is currently used by
Windows? How does Kerberos work?
Microsoft Exchange Server interview questions
- Distribution List?
- GAL, Routing Group, Stm files, Eseutil & ininteg -
what are they used for?
- What is MIME & MAPI?
- List the services of Exchange Server 2000?
- How would you recover Exchange server when the log file
is corrupted?
Sysadmin interview questions
- What is a level 0 backup?
- What is an incremental backup?
- What steps are required to perform a bare-metal
recovery?
- Name key files or directories on a UNIX system that
should always be backed up.
- Name key files or directories on a Windows system that
should always be backed up.
- What is RAID 0?
- What is RAID 0+1? Why is it better than 0?
- What is RAID-5?
- Why would you NOT want to encapsulate a root directory
with Veritas?
- What is concatenation?
- What is striping?
- What is a spindle?
Networking questions
- What is a default gateway? - The exit-point from one network and entry-way
into another network, often the router of the network.
- How do you set a default route on an IOS Cisco router? - ip route 0.0.0.0 0.0.0.0 x.x.x.x [where x.x.x.x
represents the destination address]
- What is the difference between a domain local group and
a global group? - Domain local groups
grant permissions to objects within the domain in which the reside. Global
groups contain grant permissions tree or forest wide for any objects
within the Active Directory.
- What is LDAP used for? - LDAP is a set of protocol used for providing
access to information directories.
- What tool have you used to create and analyze packet
captures? - Network Monitor in
Win2K / Win2K3, Ethereal in Linux, OptiView Series II (by Fluke Networks).
- How does HSRP work?
- What is the significance of the IP address
255.255.255.255? - The limited broadcast
address is utilized when an IP node must perform a one-to-everyone
delivery on the local network but the network ID is unknown.
12 general questions from an international
company
A TechInterviews reader
sent in the questions he faced at a major global company. The questions are
fairly generic:
- Tell me about your analytical skills, cite some
examples of how you have used your skills in the past.
- What are some of your long term goals?
- What are your short term goals?
- Where do you see yourself five years from now?
- Tell me why I should hire you?
- What does customer service mean to you?
- Why did you leave your last job?
- Describe your definition of a team player?
- Sight examples of when in the past you have proven to
be a team player?
- How would you handle a conflict with another employee?
- What do you believe you can gain by working at this
company?
- Give me some examples of times in the past, when you
were able to avoid a conflict, by thinking on your feet. Tell what you
know about this company.
Its a awesome collection of questions... Imran
ReplyDeleteGreat n very helpful
ReplyDeleteVery Good
ReplyDeletegood collections imran .keep it up
ReplyDeleteIt's very good question. Can you share answers?
ReplyDeleteVery helpful notes for interview
ReplyDeletePlease tell me that youre heading to keep this up! Its so great and so important. I cant wait to read a lot more from you. I just feel like you know so substantially and know how to make people listen to what you might have to say. This blog is just too cool to become missed. Terrific stuff, genuinely. Please, PLEASE keep it up!
ReplyDeleteThanks
DeletePlease tell me that youre heading to keep this up! Its so great and so important. I cant wait to read a lot more from you. I just feel like you know so substantially and know how to make people listen to what you might have to say. This blog is just too cool to become missed. Terrific stuff, genuinely. Please, PLEASE keep it up!
ReplyDeletePlease tell me that youre heading to keep this up! Its so great and so important. I cant wait to read a lot more from you. I just feel like you know so substantially and know how to make people listen to what you might have to say. This blog is just too cool to become missed. Terrific stuff, genuinely. Please, PLEASE keep it up!
ReplyDeleteThanks for comments...
DeleteNice!!
DeleteThis comment has been removed by a blog administrator.
ReplyDeleteThak you soooooooo moooooch
ReplyDeletemost of the answers lead to null. post some real time interview questions
ReplyDeletevery good question
ReplyDeleteVery much informative
ReplyDeleteVery Nice
ReplyDeleteIt is very nice!
ReplyDeleteBigBrother
ggod bro...
ReplyDeletekeep it up ... it will be help for freshers.& job seekers.
superb.....It is very good...So helpful..Please keep it up
ReplyDeleteIt too good......please keep on updating question and answer.... In this site is very helpful for everyone
ReplyDeleteIt's good.
ReplyDeleteHave a question....
In my environment I have 2000 servers and 1 server is down.how to find/how do I come to know that server is down
You need monitoring service to check that, Solar winds has lots of product for server / network monitoring.
Deleteuse nagios server.
Deletesupper verryy veerrrryy good super collections
ReplyDeleteThanks
DeleteThis comment has been removed by a blog administrator.
ReplyDeleteThis comment has been removed by a blog administrator.
ReplyDeleteAnswers are not much effectives as its not in the right forms.
ReplyDeletereally it is a very good collection
ReplyDeleteg8 work man
ReplyDeleteThanks Ashish
Deletevery interesting collection. Really helpful.
ReplyDeletenice works
ReplyDeleteThanks Dinesh
Deletecdfdf
ReplyDeletePlease leave proper comments Thanks.
Delete
ReplyDeleteIhave 1 branch office in bangalore. and main office is in Hyderabad. In main office ihave installed ADDC, and branch office i And branch office i installed RODC ..IN BRANCH OFFICE RODC IS FAILED WHAT CAN I DO .PLZ TELL ME THE answer
Answer- restore RODC from backup & it will take all the updates from Main office DC if you are backing up server daily / weekly / monthly.
Deleteif there is no backup just do the metadata cleanup for the RODC and reinstall fresh RODC.
hope answers the questions.
Venkat
ReplyDeleteIhave 1 branch office in bangalore. and main office is in Hyderabad. In main office ihave installed ADDC, and branch office i And branch office i installed RODC ..IN BRANCH OFFICE RODC IS FAILED WHAT CAN I DO .PLZ TELL ME THE answer
Answer- restore RODC from backup & it will take all the updates from Main office DC if you are backing up server daily / weekly / monthly.
ReplyDeleteif there is no backup just do the metadata cleanup for the RODC and reinstall fresh RODC.
hope answers the questions.
hope answers the questions.
ReplyDelete