Active Directory And domain Interview Questions - Part 3

1) What is Schema?

1. All domain in forest has something in common and that is SCHEMA

2. SCHEMA  defines the Active Directory Database

3. SCHEMA determines what can be saved in the database and the structure of the database

4. Each domain has each copy of database but the schema determines its Design

5. Schema is shared between all domains in the Forest

6. When changes are made to schema , these changes are relicated to every domain in the forest 

2) What is a tree?

  A domain controller sharing the same name space by its child server  form a tree

  For eg: logon.com is root domain and study.logon.com is child server this form a tree

3) What is a Forest?

Two or more domain connected by trust relation which are having different namespace comes under forest. Each forest has its own schema and own database

For Eg: logon.com and login.com are connected by trust then it comes under forest. A user from logon.com can acess the a resource of login.com

4) Which protocol is used by ADS for time sync. between PC's?

SNTP (Simple network time protocol)

5) What is the ISTG?

Intersite Topology Generator (ISTG), which is responsible for the connections among the sites. By Default the first Server has this role. 

6) How do you view all the GlobalCatlog’s in the forest?

Expand acitve directory user and computer----domain controller----select domain controller–Right click – Properties – ntds setting----there will be check box for global catalog.

7) What is tombstone period ?

After deleting an object in AD the objects will not be deleted permanently. It will be remain 60 days by default .After 60 days object will be deleted permanently from all Dc’s.

8)what are the port numbers for Kerberos, LDAP and Global catalog

Kerberos – 88, LDAP – 389, Global Catalog – 3268 

9) What are the different types of partitions present in AD?
Active directory is divided into three partitions
Configuration Partition—replicates entire forest
Schema Partition—replicates entire forest
Domain Partition—replicate only in domain

10) Can GC Server and Infrastructure place in single server If not explain why ?
No, As Infrastructure master does the same job as the GC. It does not work together.

Which is service in your windows is responsible for replication of Domain controller to another domain controller.