Important Port Numbers

15                Netstat

21                FTP

23               Telnet

25                SMTP

110              POP3

42                WINS

53                DNS

67                Bootp

68                DHCP

3268            AD Global Catalog

3269            AD Global Catalog over SSL

88                Kerberos

101              HOSTNAME

139              NetBIOS

161              SNMP

180              RIS

389              LDAP (Lightweight Directory Access Protocol)

80                HTTP

443              HTTPS (HTTP over SSL/TLS)

443              SSL (https) (http protocol over TLS/SSL)

220              IMAP3

119              NNTP

123              NTP     (Network time protocol)    

Installation Of WDS using command line

Use the below command line for installation of WDS server

GO to  powershell and run the command ServerManagerCmd -install WDS.

Installing Windows Deployment Services

Here we will see how to install Windows Deployment Services. Windows Deployment Services is a technology from Microsoft for installation of Windows operating systems by network, Windows Deployment Services role in server 2008 R2 allow you to deploy Windows operating systems  Windows 7, Windows Vista and Windows Server 2008 R2.

On the server where you are installing Windows Deployment Services role, launch the Server Manager, right click on Roles, click on Add Roles. On the Server Roles page, select Windows Deployment Services. Click on Next.

On the Role Services page, the Deployment Server and Transport Server are selected on the second screen of the installation wizard. Click on Next

click close button when the installation is complete 

Restrict using pendrive and other storage devices using Group policy

Disable Removable Storage Using GPO

Windows Server 2008 introduces a Group Policy setting that can prohibit the read or write activities of floppy, CD and DVD drives, tape, and devices such as mobile phones, music players, and cameras

Within the Group Policy Editor, navigate to \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.

 All Removable Storage Classes: Deny All Access. If we enable this policy , then we prevent  users from mounting ANY class of removable media.

Turn OFF windows update using Group policy

TurnOFF windows Update Using GPO

Go to your Group Policy management console and navigate to Administrative Templates | System | Internet Communication Management | Internet Communication Settings

Set the “Turn off access to all Windows Update features” to Enabled.

If this policy setting is enabled, all Windows Update features are removed. It does not allow the client pc to access  the Microsoft Update and Windows Update Web sites. The client pc will not get automatic updates directly from Windows Update , but it can still get updates from a WSUS server in the network

Enable Custom screensaver via group policy

Screensaver Enable

Setting a default screen saver with settings that will be compatible with changes in Windows 7 and with your existing Windows XP and Vista clients.  Start with a Group Policy Object (GPO) that is linked to the OU where your user accounts are located in Active Directory. This can be either a new GPO or an existing GPO that may already have other settings you want applied to all of your users.

Go to Policy > User Configuration > Administrative Templates > Control Panel > Personalization. Here are the policies you’re looking for:

Policy Setting Option Enable Screen Saver Enabled Force Specific Screen Saver Enabled scrnsave.scr Password Protect Screen Saver Enabled Screen Saver timeout Enabled Time set in seconds (900 in the example)

Enable Remote Desktop using Group Policy

Enable or Disable Remote dektop for users

·    Click Start – All programs – Administrative Tools – Group Policy Management.

·    Create or Edit Group Policy Objects.

·    Expand Computer Configuration – Administrative Templates – Windows Components – Remote Desktop Services – Remote Desktop Session Host – Connections.

·    Allow users to connect remotely using Remote Desktop Services (enable or disable)

Prevent changing desktop background using group policy

Prohibit users from  changing the background

1.Under User Configuation -> Policies -> Administative Templates -> Control Panel -> Personalization -> Prevent changing desktop background  Enable - enable this radio button

( To prohibit users from  changing the background )

2. Close Group Policy Management Editor Window

3. Run " gpupdate /force " in DC.

4. In clients i also run the command " gpupdate /force ". Then restart or Log off. 

Group Policy to configure Desktop Wallpaper

Administrative Template “Desktop Wallpaper” Setting

This setting can be found under User Configuration > Administrative Templates > Desktop > Desktop and is straight forward to configure as all you have to do is specify the explicit local path or a UNC to the image you want displayed as the desktop wallpaper

TROUBLESHOOTING

1. Run RSOP.MSC on client, make sure the wallpaper policy was applied.
2. If the policy was applied, check the permission of the wallpaper folder. Make sure Authenticated User has Read Permission.
3. Could you manually set the wallpaper?
4. Run "gpresult /v >>c:\gp.txt" 

DNS Server Interview Questions and answers

1) Types of DNS Servers

Primary DNS

Secondary DNS

Active Directory Integrated DNS

Forwarder

Caching only DNS

2) What is the main purpose of a DNS server?
DNS servers are used to resolve FQDN hostnames into IP addresses and vice versa.

3) What is the port no of dns ?
53.

4) What is a Forward Lookup?
Resolving Host Names to IP Addresses.

5) What is Reverse Lookup?
It?s a file contains host names to IP mapping information.

6) What is a Resource Record?
It is a record provides the information about the resources available in the N/W infrastructure.

7) What are the DNS Roles?
Standard Primary, Standard Secondary, & AD Integrated.

8) What is a Zone?
Zone is a sub tree of DNS database.

9) Types of DNS Servers?

Primary DNS

Secondary DNS

Active Directory Integrated DNS

Forwarder

Caching only DNS

10)  Types of DNS Zone ?

Primary Zone

Secondary Zone

AD integrated Zone

Stub Zone

11) How many SOA record does each zone contain?

Each zone will have one SOA record. 

12) What is DDNS?

Ans: It dynamically registers m/c name in the AD integrated DNS database. It also used to dynamically register domain controllers name in the DNS at the time of installing AD.

13) What are Resource records in DNS?

 RR in DNS are MX, PTR, A, SOA, SRV, CNAME, NS.

14) What are SRV records?

These are the records which maps the AD service with the location of the service i.e. GC, Kerberos and LDAP

15) What is the main purpose of SRV records ?
SRV records are used in locating hosts that provide certain network services.

16) What is SOA Record?

SOA is a Start Of Authority record, which is a first record in DNS, which controls the startup behavior of DNS. We can configure TTL, refresh, and retry intervals in this record.

17) What are the types of DNS?

Primary, Secondary, Catch only.

18) What are different DNS queries?

Recursive and iterative.

 19) What is primary and secondary  Zones in DNS?

DNS servers can contain primary and secondary zones. 

Primary zone is a copy of a zone where updates can be made,

Secondary zone is a copy of a primary zone.  For fault tolerance purposes and load balancing, a domain may have several DNS servers that respond to requests for the same information.

The entries within a zone give the DNS server the information it needs to satisfy requests from other computers or DNS servers.

20) What is an AD-integrated zone?

AD-integrated zones store the zone data in Active Directory and use the same replication process used to replicate other data between domain controllers.

The one catch with AD-integrated zones is that the DNS server must also be a domain controller.

21) What is a STUB zone?

A stub zone is a copy of a zone that contains only those resource records necessary to identify the authoritative Domain Name System (DNS) servers for that zone.

A stub zone is used to resolve names between separate DNS namespaces.

The master servers for a stub zone are one or more DNS servers authoritative for the child zone

22) What is NSlookup ?

It is a tool used troubleshoot DNS related issues.

23) How do you manually create SRV records in DNS?
This is on windows server go to run ---> dnsmgmt.msc rightclick on the zone you want to add srv record to and choose "other new record" and choose service location(srv).

24) Where does a Host File Reside?
c:\windows\system32\drivers\etc.

25) What is a query?
A request made by the DNS client to provide the name server information.

26) What are the diff. types of Queries?
Recursion, iteration.

27) Tools for troubleshooting DNS?
DNS Console, NSLOOKUP, DNSCMD, IPCONFIG, Logs.

Interview Questions and Answers For DHCP SERVER

1) What is DHCP?

DHCP stands for "Dynamic Host Configuration Protocol".

2) What is DHCP's purpose?

Dhcp server helps to assign ip address to the clients in the network.and also it assign subnet mask ,default gateway and  primary and secondary dns address.The overall purpose of this is to reduce the work necessary to administer a large IP network       

                                                                     

3) What is dhcp scope ?
DHCP scopes are used to define ranges of addresses from which a DHCP server can assign IP addresses to clients.

Eg: 192.168.1.1 to 192.168.1.200

4) What is Exclusion range in dhcp server?

We can exclude some ip range from a active scope which may be assigned to servers

Eg: 192.168.1.1 to 192.168.1.5 this range will be excluded from the scope

5) What is reservation in dhcp server?

In reservation option we can bind a ip address to host using its MAC address. Every time it gets the same ip till the reservation is active

6) Which port does DHCP uses?

UDP port 67 client machine listen over port 68

7) What process dhcp server use and Explain?

Dhcp uses DORA process

D-Discover: A user turns on a computer with a DHCP client. The client computer sends a broadcast request called a DISCOVER message throughout the network, looking for a DHCP server to answer. The router directs the DISCOVER packet or message  to the correct DHCP server. The server receives the DISCOVER packet

O-Offer: As the dhcp receive the request from client, the server determines an appropriate address (if any) to give to the client. The server then temporarily reserves that address for the client and sends back to the client an OFFER packet or message, with that address information

R- Request: The dhcp client will get related request  from all dhcp servers ,and it will accept the first one that it receives.It will then send a request to the DHCP for the offered IP address.
A-Acknowledge: When DHCP received the DHCP Request from the client for the IP address, it will send back a DHCP acknowledge, thereby allocating that IP address to the client

8) If DHCP is not available what happens to the client?

Client will not get IP and it cannot be participated in network . If  client already got the IP and having lease duration it use the IP till the lease duration expires.

9) what is the difference between Authorized DHCP and Non Authorized DHCP?

To avoid problems in the network causing by mis-configured DHCP servers, server in windows 2000 must be validate by AD before starting service to clients. If an authorized DHCP finds any DHCP server in the network it stops serving the clients 

10) What is APIPA IP address?

APIPA stands for automatic private IP addressing. When DHCP server is not available the Windows client computer assigns an automatic IP address to itself so that it can communicate with the network computers. This ip address is called APIPA

11) What IP address is assigned to the computer when the DHCP server is not available?

It’s in the range of 169.254.X.X

12) What protocol and port does DHCP use?

DHCP, like BOOTP runs over UDP, utilizing ports 67 and 68.

13) What is a DHCP lease?

A DHCP lease is the amount of time that the DHCP server permits to the DHCP client to use a particular IP address. Administrator can set the lease time.

14) Can a BOOTP client boot from a DHCP server?

Only if the DHCP client were specifically written to make use of the answer from a BOOTP server.

Can a DHCP server back up another DHCP server?

You can have two or more servers handing out leases for different addresses.

15) Where is DHCP defined?

In Internet RFCs.

16) Benefits of using DHCP ?
Safe and reliable configuration.

DHCP avoids configuration errors caused by the need to manually type in ip address at each computer.

DHCP prevent address conflicts caused by a previously assigned IP address being reused to configure a new computer on the network.

Active Directory And domain Interview Questions - Part 3

1) What is Schema?

1. All domain in forest has something in common and that is SCHEMA

2. SCHEMA  defines the Active Directory Database

3. SCHEMA determines what can be saved in the database and the structure of the database

4. Each domain has each copy of database but the schema determines its Design

5. Schema is shared between all domains in the Forest

6. When changes are made to schema , these changes are relicated to every domain in the forest 

2) What is a tree?

  A domain controller sharing the same name space by its child server  form a tree

  For eg: logon.com is root domain and study.logon.com is child server this form a tree

3) What is a Forest?

Two or more domain connected by trust relation which are having different namespace comes under forest. Each forest has its own schema and own database

For Eg: logon.com and login.com are connected by trust then it comes under forest. A user from logon.com can acess the a resource of login.com

4) Which protocol is used by ADS for time sync. between PC's?

SNTP (Simple network time protocol)

5) What is the ISTG?

Intersite Topology Generator (ISTG), which is responsible for the connections among the sites. By Default the first Server has this role. 

6) How do you view all the GlobalCatlog’s in the forest?

Expand acitve directory user and computer----domain controller----select domain controller–Right click – Properties – ntds setting----there will be check box for global catalog.

7) What is tombstone period ?

After deleting an object in AD the objects will not be deleted permanently. It will be remain 60 days by default .After 60 days object will be deleted permanently from all Dc’s.

8)what are the port numbers for Kerberos, LDAP and Global catalog

Kerberos – 88, LDAP – 389, Global Catalog – 3268 

9) What are the different types of partitions present in AD?
Active directory is divided into three partitions
Configuration Partition—replicates entire forest
Schema Partition—replicates entire forest
Domain Partition—replicate only in domain

10) Can GC Server and Infrastructure place in single server If not explain why ?
No, As Infrastructure master does the same job as the GC. It does not work together.

Which is service in your windows is responsible for replication of Domain controller to another domain controller.

Active Directory and Domain Interview Qestions- Part 2

1) What is difference between Server 2003 vs 2008?
1. Virtualization. (Windows Server 2008 introduces Hyper-V (V for Virtualization) but only on 64bit versions. More and more companies are seeing this as a way of reducing hardware costs by running several 'virtual' servers on one physical machine.)
2. Server Core (provides the minimum installation required to carry out a specific server role, such as for a DHCP, DNS or print server)
3. Better security.
4. Role-based installation.
5. Read Only Domain Controllers (RODC).
6. Enhanced terminal services.
7. PowerShell - Microsoft's command line shell and scripting language has proved popular with some server administrators.
8. IIS 7 .
9. Bitlocker - System drive encryption can be a sensible security measure for servers located in remote branch offices. >br> The main difference between 2003 and 2008 is Virtualization, management. 2008 has more in-build components and updated third party drivers.

2) What are the requirements for installing AD on a new server?
1. An NTFS partition with enough free space.
2. An Administrator's username and password.
3. The correct operating system version.
4. A NIC Properly configured TCP/IP (IP address, subnet mask and - optional - default gateway).
5. A network connection (to a hub or to another computer via a crossover cable) .
6. An operational DNS server (which can be installed on the DC itself) .
7. A Domain name that you want to use .
8. The Windows 2000 or Windows Server 2003 CD media (or at least the i386 folder) .

3) How can you forcibly remove AD from a server

    Demote the server using dcpromo /forceremoval, then remove the metadata from Active directory using ndtsutil. 

4) What is difference between Server 2003 vs 2008?
1. Virtualization. (Windows Server 2008 introduces Hyper-V (V for Virtualization) but only on           64bit versions. More and more companies are seeing this as a way of reducing hardware

    costs by running several 'virtual' servers on one physical machine.) 

2. Server Core (provides the minimum installation required to carry out a specific server role, such     as for a DHCP, DNS or print server)
3. Better security.
4. Role-based installation.
5. Read Only Domain Controllers (RODC).
6. Enhanced terminal services.
7. PowerShell - Microsoft's command line shell and scripting language has proved popular with         some server administrators.
8. IIS 7 .
9. Bitlocker - System drive encryption can be a sensible security measure for servers located in              remote branch offices. >br> The main difference between 2003 and 2008 is  Virtualization,              management. 2008 has more in-build components and updated third party drivers.

5) How do you view replication properties for AD partitions and DCs?

    By using replication monitor .Go to start > run > type replmon

6) What is KCC ?

1. Knowledge Consistency Checker (KCC)

2. When site and sitelinks are  configured kcc will automatically make connection between sites for.

3. If network goes down kcc will reconfigure the connection between the site to ensure active directory replication will happen.

4. kcc runs in the background doesnot need to be configured manually

7) What are the processes involved in the FRS?

    FRS is File replication service which is responsible for replicating Sysvol folder and the DFS

Information

8) Which protocol does FRS uses for directory replication?

    RPC over IP for inter-site and intra-site and uses port no 135.

9) What is the physical and logical structure of AD

 Active directory physical structure is a hierarchal structure which fallows  Forests—Trees—Domains—Child Domains—Grand Child—etc

Active directory is logically divided into 3 partitions

1.Configuration partition 2. Schema Partition 3. Domain partition 

10) What System State backup contains ?
     Contains Startup files,
     Registry
     Com + Registration Database
     Memory Page file
     System files
    AD information
    Cluster Service information
    SYSVOL Folder