MCTS 70-640

Start Studying!

Terms

undefined, object

copy deck

What do Forests share?: They share the same config and schema.
What is a tree?: A tree is a group of domains that share the same name space. Example: corp.abc.com
What are the 3 types of of Structure for a Active Policy?: Forest -> Tree -> Domain
What is a schema?: A schema defines a domain it is like the building code.
What is a domain?: A domain is a database of objects that organize users and computers that can be broken up in ous.
When do you use advanced install mode?: Advanced install mode is used for a new tree in a forest or for media based installs.
What is server 2008 core server?: A guiless mode of server 2008
What are the main 3 tables discussed of NTDS.dit?: Schema, Config, and Domain
What Tables synchronize forest wide?: Schema, and Config
Active Directory Users and Computers modifys what table?: Domain table
What does raise domain functional level mean?: It is the minimum level of operating systems used for domain controllers
When can you lower domain functionality levels?: You can only lower a domain functionality level if the Forrest domain functionality level is lower.
Can server 2008 core server use powershell?: No
What does powershell need to run?: .Net framework
What is sconfig.exe?: A program that lets you modify various properties of a 2008 r2 core server. Example ip, domain, computer name, time, date, etc
Can Server 2008 Core be a certificate server?: No, Only 2008 R2
Is accidental deletion default checked in ou setup?: Yes, only in server 2008 and 2008 r2
Why should you not reset a users password in a workgroup?: because of encryption. If the user has encrypted files then they will not be accessible if you reset the password. have them use a password reset disk.
What is redircmp?: Changes default computer location for adding a computer to a domain.
How do you change the default user location?: redirusr
What is DACL?: Discretionary Access Control List. Used for delegating permissions.
What is SACL?: Secure access control list. User for auditing. Needs to be turned on via policy first.
When will an allow overwrite a deny permission?: Only if the deny permission is a pushed permission.
Why do you register the schema .dll?: to add a the active directory schema to mmc.
How can you add a user from command line?: Powershell, VB Scripts, DSADD, CSVDE, LDIFDE
Why is active directory web services important?: It is needed for powershell.
How can you add a alternative upn?: From the active directory sites and services.
Define a security group.: A group that is given a sid that can do security and email.
Define a distribution group.: No sid, email only
Define Domain Local Membership and Resource access.: Open Membership, Local domain resource access
Define Global group Membership and Resource access.: Membership from users in the same domain only. Open resource access
Define Universal Group Membership and Resource access.: Open Membership and open enrollment.
Where does universal membership reside?: The global catalog server
What is a shadow group?: A group that mimics the users in its ou for PSOs
What is a PSO?: Password Setting Object. It lets you create password polices specific to a group or user.
What Domain functional level do you need to be to use PSOs?: Server 2008
What is a special identity group?: Groups that have dynamic membership. Like everyone or interactive users.
What can group policy link to?: Containers only. Site, Domain, OU
Does local policy win over Active Directory?: No
How can you keep GPOs from overwriting each other.: The last one read will overwrite the previous one if setup for the same attributes only if the previous on is optional. Set to enforced to overwrite optional.
What is the server core configuration command for installing roles and components?: oclist.exe
What is the command to promote a domain controller?: dcpromo.exe
What is the command to configure dns via command prompt?: dnscmd.exe
What is the command to configure dfs via command prompt?: dfscmd.exe
What does dsquery.exe do?: It finds objects in the active directory via command prompt.
What do you have to do before running dc promo on a core server?: create an answer file
What is the command to change ip?: netsh
How do you manage the scheme?: Using the ad schema snapin
What port is LDAP?: 389
What port is used by the global catalog server?: 3268
What is the best way to reset computer passwords?: netdom or nltest
Who can add an alternative upn?: enterprise admin
What is the best way to have users from one domain connect to a resource in another domain?: On the resource domain make a local group and on the user domain make a global group. Link the global to the local.
What is a fine grain password setting?: PSO: Password Setting Option
How is group policy read?: Local, Site, Domain, OU
What is djoin.exe?: Used to add a computer to the domain while the domain is offline
How does block policy inheritance work?: It blocks all optional policy above for the location it set to and for the locations below it as well.
How do you edit local group policy?: gpedit.mmc
How do you push out group policy update?: gpupdate /force
What policys follow pc?: Local GP and Site GP
What policies follow users?: Domain and OU Group Policies
What group does a user need to belong to to make a group policy?: Group Policy Creator Owner
Where do you give permission to link a gpo?: In group policy management console.
Are site policies for computers static?: No. It depends on your ip scheme.
What does group policy modify?: User and computers it does not attach to groups.
How do you fiter out a person from a specific policy?: Either WMI filtering or Security filtering.
What is WMI filtering?: Setting up a queue for a specific result to have a gpo apply to. Example computers with more that 2 gb or memory.
What is group policy security filtering?: Setting up permission in the dacl of the group policy object for a specific group. Then setting read and append permissions allow or deny. This allows a policy to not apply or apply to member of that group.
What is gpresult?: A command tool to give status on what policy apply to that machine and user account. Use the /R command.
Where are GPO setting kept?: Sysvol
Where does GPO Admin templates modify?: The registry
What is a .admx file?: A 2008 admin template file
What changes were made in the administrator template setting for server 2008?: You can now use commenting and starter gpos.
What is a starter gpo?: a gpo that is used as a template for other gpos.
Why is it better to use manged administrative template gpos?: If the gpo no longer applies then the registry mods are removed. The unmanaged will leave the changes to the registry even though the policy does not apply.
What tables does AD sites and services bind to?: Config table
What tables does domain and trusts modify?: Config Table
What is look back processing and why would you use it?: Look back processing allows you to have a group policy attached to an ou modify other objects that interact with the object in you ou. Example if Bob loggs in to a pc the loopback could have a user properties policy that is attached to the computer ou modify Bob.
What is repadmin.exe?: Repadmin is a command line utility that is used to diagnose syncing issues between domain controllers. /syncall used to push sync.
What is secedit.sbd?: The local security databse located in c:windows:securitydatabase. These are settings are from local group policy
Where can you import and export the local security policy?: Local group policy editor.
What changes in 2008 R2 in auditing?: There are advanced auditing options now.
What can PSO be linked to?: USERS AND universal groups
What tool is used to make psos?: ASDI edit
What is a RODC and why is it used?: It is a read only domain controller and is used to keep a copy copy of the database without passwords. Used for remote sites.
Can a rodc store passwords?: By default no but you can set it to store some passwords for specific objects.

Start Studying!

Deck Info

Number of cards 86

Created By biggdan.fym