Active Directory Interview Questions and Answers
Question - 11 : - I am trying to create a new universal user group. Why can’t I ?
Answer - 11 : - Universal groups are allowed only in native-mode Windows Server 2003 environments. Native mode requires that all domain controllers be promoted to Windows Server 2003 Active Directory.
Question - 12 : - What is LSDOU ?
Answer - 12 : - It’s group policy inheritance model, where the policies are applied toLocal machines, Sites, Domains and Organizational Units.
Question - 13 : - Why doesn’t LSDOU work under Windows NT ?
Answer - 13 : - If the NTConfig.pol file exist, it has the highest priority among the numerous policies.
Question - 14 : - What’s the number of permitted unsuccessful logons on Administrator account?
Answer - 14 : - Remember, though, that it’s the Administrator account, not any account that’s part of the Administrators group.
Question - 15 : - Can GC Server and Infrastructure place in single server If not explain why ?
Answer - 15 : - No, As Infrastructure master does the same job as the GC. It does not work together.
Question - 16 : - Which is service in your windows is responsible for replication of Domain controller to another domain controller.
Answer - 16 : - KCC generates the replication topology.
Use SMTP / RPC to replicate changes.
Question - 17 : - What Intrasite and Intersite Replication ?
Answer - 17 : - Intrasite is the replication with in the same site & intersite the replication between sites.
Question - 18 : - What is lost & found folder in ADS ?
Answer - 18 : - It’s the folder where you can find the objects missed due to conflict.
Ex: you created a user in OU which is deleted in other DC & when replication happed ADS didn’t find the OU then it will put that in Lost & Found Folder.
Question - 19 : - What is Garbage collection ?
Answer - 19 : - Garbage collection is the process of the online defragmentation of active directory. It happens every 12 Hours.
Question - 20 : - What is the difference between Windows 2000 Active Directory and Windows 2003 Active Directory? Is there any difference in 2000 Group Polices and 2003 Group Polices? What is meant by ADS and ADS services in Windows 2003?
Answer - 20 : - Windows 2003 Active Directory introduced a number of new security features, as well as convenience features such as the ability to rename a domain controller and even an entire domain
Windows Server 2003 also introduced numerous changes to the default settings that can be affected by Group Policy - you can see a detailed list of each available setting and which OS is required to support it by downloading the Group Policy Settings Reference.
ADS stands for Automated Deployment Services, and is used to quickly roll out identically-configured servers in large-scale enterprise environments. You can get more information from the ADS homepage.