FOR WIDOWS :Website : http://www.coolinterview.com/type.asp? order=3&iType=823&iDBLoc=0 FOR HR INT : http://www.coolinterview.com/type.asp?

order=3&iType=177&iDBLoc=0

1.How do you change the DS Restore admin password? To Reset the DSRM Administrator Password
1. Click, Start, click Run, type ntdsutil, and then click OK. 2. At the Ntdsutil command prompt, type set dsrm password.

3. At the DSRM command prompt, type one of the following lines: o To reset the password on the server on which you are working, type reset password on server null. The null variable assumes that the DSRM password is being reset on the local computer. Type the new password when you are prompted. Note that no characters appear while you type the password. -oro To reset the password for another server, type reset password on server servername, where servername is the DNS name for the server on which you are resetting the DSRM password. Type the new password when you are prompted. Note that no characters appear while you type the password. 4. At the DSRM command prompt, type q. 5. At the Ntdsutil command prompt, type q to exit.

2.Whats the difference between local, global and universal groups?

Domain local groups gives access permissions to global domain groups to access local resources. Global groups gives access rights to resources in other trusted domains. Universal groups grant access to resources in all trusted domains.

3. Where is secedit? Windows 2000 SecEdit Windows 2003 - Gpupdate The Gpupdate.exe command-line utility is new in Windows Server 2003. It replaces the Secedit refresh policy command that was used in Windows 2000. Ans: Its now gpupdate. Gpupdate.exe is used to update new group policies.

RSoP: GUI-based tool to review policy settings Using RSoP, users can query the existing policies that they linked to a site, domain, or OU and that are applied to users and computers. RSoP has two modes: Logging mode: we can check what policy is applied to a user or computer. Planning mode: This mode is used to test the effects of new Group Policy settings before implementing in a production environment. Planning mode should be used for the purposes listed below: gpresult: Command-line tool to review policy settings Gpresult.exe used to trouble shoot Group Policy settings.

Information on the OS, computer, and user. Group Policy information, including: o When Group Policy was last applied o The domain controller that applied Group Policy o Information on all GPOs that are applied and their details o Information on the Registry settings that are applied and their details o Scripts

4. What is the difference between Windows 2000 Active Directory and Windows 2003 Active Directory? Is there any difference in 2000 Group Polices and 2003 Group Polices? What is meant by ADS and ADS services in Windows 2003? 5. How can you restrict running certain applications on a machine? 6. What is Empty Root Domain? 7. What is the Group Policy? 8. What can be restricted on Windows Server 2003 that wasn?t there in previous products? 9. Minimum Requirement for Installing AD? 10. Explain Active Directory? 11. Explain Active Directory schema? 12. What is Forest? 13. Why am I having trouble printing with XP domain users? 14. I want to setup a DNS server and Active Directory domain. What do I do first? If I install the DNS service first and name the zone 'name.org' can I name the AD domain 'name.org' too? 15. What is Organizational Units?

16. (1)What is Schema Partition.? (2)What is Domain Partition.? (3)What is Configure Partition.? 17. What is the Group Policy? 18. What is Active Directory Partition ? 19. How will you verify whether the AD installation is proper? 20. What are the requirements for installing AD on a new server? 21.Explain Active Directory schema? 22.How many passwords by default are remembered when you check "Enforce Password History Remembered"? 23.What is LDAP? 24.How do you backup AD? 25.What is the best way to migrate Exchange 2000 mailboxes to Exchange 2003? 26.What is LDAP? 27.Write Active Directory Restore Methods? 28.What are GPOs? 29.What is the order in which GPOs are applied? 30.What is Active Directory? 31."Is there a way to assign static IPs to workstations through AD or GPOs?" 32.What is Domains in Active Directory? 33.What is Native Mode? 34.What is The SYSVOL shared folder? 35.What?s the difference between guest accounts in Server 2003 and other editions? 36.What is Mixed Mode? 37.Why not make all DCs in a large forest as GCs? 38.What?s the major difference between FAT and NTFS on a local machine? 39.What is Restoring Active Directory? 40."Back to group policy for a moment... I understand distributing software packages via the AD infrastructure is also supported. What are the possible deployment targets? Only OUs, or can these packages be targeted at single users or computers, or the entire domain?" 41.How do I design two Active Directory domains in a client network?

42.What is difference between ADS and domain controller? 43.Related article: Active Directory for Windows 2000 and 2003: What's the difference? 44.I want to setup a DNS server and Active Directory domain. What do I do first? If I install the DNS service first and name the zone 'name.org' can I name the AD domain 'name.org' too? 45.What is the best way to migrate Exchange 2000 mailboxes to Exchange 2003? 46.How do I design two Active Directory domains in a client network? 47.What is difference between ADS and domain controller? 48.How can I modify the path of all my users' home directory within Active Directory using a vbs logon script? 49.Why can?t you restore a DC that was backed up 4 months ago? 50.How do I determine if user accounts have local administrative access? I am upgrading from NT to 2003. The only things that are NT are the PDC and BDCs; everything else is 2000 or 2003 member servers. My question is, when I upgrade my NT domain controllers to 2003, will I need to do anything else to my Windows 2000/2003 member servers that were in the NT domain?

You want to standardize the desktop environments (wallpaper, My Documents, Start menu, printers etc.) on the computers in one department. How would you do that?

How do I use Registry keys to remove a user from a group? Why are my NT4 clients failing to connect to the Windows 2000 domain? "Where can I find a step by step guide to setup this on my network?" "One thing I did not understand is which machine do you use to manage the active directory. Is it a seperate server which has access to all machines on network?

"Doesn't the OU security customization defeat the overall purpose of AD? restriction vs. transitive trust?"

"What are the differences between OU's and Containers?" "Where can I download the GPMC?" "So we might have objects that reside both in OU's and Containers or can they be present only in one of these at any point in time ?" "Is the extention .com required or necessary in AD naming? Is .you or .org allowable? .com implies an HTTP protocol, doesn't it?" "Is there a way to get a report on who is in which OU?"

"I just missed the part of how to create the active directory, can you give the direction?"
"AD replication site need ports ???" Active Directory Replication works on many ports. Domain Controllers replicate with its partners using TCP 389, RPC 135, DNS 53 etc. There are more than 10 ports need to be opened in the firewall. Sometimes, it is not possible to open all the port range in the production environment. You can allow Active Directory Replication to work on one port only by modiyfing the following registry on each domain controller:

Registry Entry 1 KEY NAME: HEKY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters Entry Name: TCP/IP Port Value: Port No... Registry Entry 2 KEY NAME: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters Entry Name: DCTcpipPort Value: Port No... "There's a minimal number of DNS server that I must have in my infraestructure, or only one by domain is the recommended ?" "There's a minimal number of DNS server that I must have in my infraestructure, or only one by domain is the recommended ?" "What kind of objects can dynamically register in DNS?" "What is a cost value?" "Can you give a typical rule of thumb figure in bps of how much BW is used for intersite replication?" "Can users and computers be migrated from one domain to another?" "Is the KCC automatically run or is there some manual process that needs to occur there?" ?Is there a ?best practices? guide on how to audit Active Directory?? "I'm running classrooms and a lab in an elementary school, and wanadd a file server. Do I lose anything if I don't use Active Directory?"

"What are the core differences between Win2k and Win2k3 AD features based on today's presentation?" Can you connect Active Directory to other 3rd-party Directory Services? Name a few options? Where is the AD database held? What other folders are related to AD?

What is the SYSVOL folder? How do you view replication properties for AD partitions and DCs? What is the Global Catalog? How do you view all the GCs in the forest? What is REPLMON? What is ADSIEDIT? What is NETDOM? What is REPADMIN? What are sites? What are they used for? What?s the difference between a site link?s schedule and interval? What is the ISTG? Who has that role by default? What is Active Directory? What is the SYSVOL folder? What is LSDOU? Why doesn?t LSDOU work under Windows NT? Where are group policies stored? What is GPT and GPC? Where is GPT stored? You change the group policies, and now the computer and user settings are in conflict. Which one has the highest priority? You want to set up remote installation procedure, but do not want the user to gain access over it. What do you do? What?s contained in administrative template conf.adm? You need to automatically install an app, but MSI file is not available. What do you do? What?s the difference between Software Installer and Windows Installer?

How frequently is the client policy refreshed?

You want to create a new group policy but do not wish to inherit?

What is "tattooing" the Registry? How do you fight tattooing in 2003 installations? What does IntelliMirror do? How do FAT and NTFS differ in approach to user shares? Explan the List Folder Contents permission on the folder in NTFS? I have a file to which the user has access, but he has no folder permission to read it. Can he access it? For a user in several groups, are Allow permissions restrictive or permissive? For a user in several groups, are Deny permissions restrictive or permissive? What hidden shares exist on Windows Server 2003 installation? What?s the difference between standalone and fault-tolerant DFS (Distributed File System) installations? We?re using the DFS fault-tolerant installation, but cannot access it from a Win98 box? Where exactly do fault-tolerant DFS shares store information in Active Directory? Can you use Start->Search with DFS shares? What problems can you have with DFS installed? Is Kerberos encryption symmetric or asymmetric? What?s the difference between transferring a FSMO role and seizing one? Which one should you NOT seize? Why? How does Windows 2003 Server try to prevent a middle-man attack on encrypted line? What FSMO placement considerations do you know of?

What hashing algorithms are used in Windows 2003 Server?

What third-party certificate exchange protocols are used by Windows 2003 Server? How do you configure a ?stand-by operation master? for any of the roles? What?s the number of permitted unsuccessful logons on Administrator account?

What is System State Data? If hashing is one-way function and Windows Server uses hashing for storing passwords, how is it possible to attack the password lists, specifically the ones using NTLMv1? What is The SYSVOL shared folder? If I am trying to create a new universal user group then why can?t it is possible? What is Root ? How to manage MS cluster? "Can users and computers be migrated from one domain to another?" "Is there a way to assign static IPs to workstations through AD or GPOs?"? "Can you give a typical rule of thumb figure in bps of how much BW is used for intersite replication?" "Doesn't the OU security customization defeat the overall purpose of AD? restriction vs. transitive trust?" Explain Active Directory? What is Forest? What is Domains in Active Directory? What is Organizational Units? What is Empty Root Domain? What is Mixed Mode? What is Native Mode? What do you mean by System startup files? What is The Certificate Services database? Minimum Requirement for Installing AD? How will you verify whether the AD installation is proper? Server questions What?s the difference between Software Installer and Windows Installer? What do you do if earlier application doesn?t run on Windows Server 2003? What is the purpose of deploying local DNS servers? What is RAID in Windows Server 2008? What are some of the other roles that a server running Windows Server 2008 could fill on the network?

How is a server running Windows Server 2008 configured as a domain controller, such as the domain controller for the root domain or a child domain? What are Active Directory sites in Windows Server 2008? How do you deal with Group Policy inheritance issues? What?s new in Windows Server 2003 regarding the DNS management? Can servers running Windows Server 2008 provide services to clients when they are not part of a domain? What is the difference between a basic and dynamic drive in the Windows Server 2008 environment? What remote access options does Windows Server 2003 support? What protocol stack is installed by default when you install Windows Server 2008 on a network server? Where is GPT stored? What are some of the tools used to manage Active Directory objects in a Windows Server 2008 domain? How is WDS configured and managed on a server running Windows Server 2008? What domain services are necessary for you to deploy the Windows Deployment Services on your network? What conceptual model helps provide an understanding of how network protocol stacks such as TCP/IP work? What tools are involved in managing and deploying Group Policy? What type of group is not available in a domain that is running at the mixed-mode functional level?

If I delete a user and then create a new account with the same username and password, would the SID and permissions stay the same? What does the use of Group Policy provide you as a network administrator? In terms of DNS, what is a caching-only server? I am trying to create a new universal user group. Why can?t I? What is GPT and GPC? What is the Global Catalog? What types of Active Directory objects can be contained in an Organizational Unit? How can i configure a hardware firewall in one newly establishing organisation? Firewall Model is Fortigate 20C.Please explain in datail.How many input/output ports it have? You want to set up remote installation procedure, but do not want the user to gain access over it. What do you do? What hashing algorithms are used in Windows 2003 Server? Describe how the DHCP lease is obtained What is the primary function of domain controllers? How does Windows 2003 Server try to prevent a middle-man attack on encrypted line? What is the purpose of deploying local DNS servers? How can you restrict running certain applications on a machine? What is the difference between domain and domain and domain name server? What authentication options do Windows 2000 Servers have for remote clients? What?s the difference between forward lookup and reverse lookup in DNS? What type of Active Directory objects can be contained in a group? How the range of IP addresses is defined for a Windows Server 2008 DHCP server? Where are the settings for all the users stored on a given machine? What languages can you use for log-on scripts? Where are group policies stored?

You need to automatically install an app, but MSI file is not available. What do you do? What?s the number of permitted unsuccessful logons on Administrator account? What are the different editions of Windows Server 2008? Which Control Panel tool enables you to automate the running of server utilities and other applications? What are RODCs? And what are the major benefits of using RODCs? How are domain user accounts created and managed? How can you make sure that network clients have the most recent Windows updates installed and have other important security features such as the Windows Firewall enabled before they can gain full network access? What hashing algorithms are used in Windows 2003 Server? How can i give read, write, delete permissions to a particular user(Other user don't access the folder). What is different between Windows 98 and Windows XP? Which Windows Server 2008 tools make it easy to manage and configure a servers roles and features? Should we deploy IPSEC-based security or certificate-based security? How can you authenticate between forests? what is REPADMIN? What is New in Windows Server 2008? Which protocol does ADS require? What is the difference between 2000 Server and 2003 Server?

What is a ISP and How it works? What is binding order How can you recover a file encrypted using EFS? How do you double-boot a Win 2003 server box? If you uninstall Windows Server 2003, which operating systems can you revert to? What are the Windows Server 2003 keyboard shortcuts? What is Active Directory? How long does it take for security changes to be replicated among the domain controllers? When should you create a forest? What snap-in administrative tools are available for Active Directory? What types of classes exist in Windows Server 2003 Active Directory? How do you delete a lingering object? How is user account security established in Windows Server 2003? What do you do with secure sign-ons in an organization with many roaming users Anything special you should do when adding a user that has a Mac? Where are the documents and settings for the roaming profile stored? What?s the difference between local, global and universal groups? What is LSDOU? Why doesn?t LSDOU work under Windows NT? What is GPT and GPC?

You change the group policies, and now the computer and user settings are in conflict. Which one has the highest priority? What?s contained in administrative template conf.adm? What can be restricted on Windows Server 2003 that wasn?t there in previous products?

What is "tattooing" the Registry? How do you fight tattooing in NT/2000 installations? How do you fight tattooing in 2003 installations? What does IntelliMirror do? What?s the major difference between FAT and NTFS on a local machine? How do FAT and NTFS differ in approach to user shares? Explan the List Folder Contents permission on the folder in NTFS. I have a file to which the user has access, but he has no folder permission to read it. Can he access it? How do you double-boot a Win 2003 server box? For a user in several groups, are Allow permissions restrictive or permissive? What do you do if earlier application doesn?t run on Windows Server 2003? For a user in several groups, are Deny permissions restrictive or permissive? If you uninstall Windows Server 2003, which operating systems can you revert to? What hidden shares exist on Windows Server 2003 installation? How do you get to Internet Firewall settings? What?s the difference between standalone and fault-tolerant DFS (Distributed File System) installations? We?re using the DFS fault-tolerant installation, but cannot access it from a Win98 box?

Where exactly do fault-tolerant DFS shares store information in Active Directory? Can you use Start->Search with DFS shares? What problems can you have with DFS installed? I run Microsoft Cluster Server and cannot install fault-tolerant DFS? Is Kerberos encryption symmetric or asymmetric? How does Windows 2003 Server try to prevent a middle-man attack on encrypted line? What third-party certificate exchange protocols are used by Windows 2003 Server? If hashing is one-way function and Windows Server uses hashing for storing passwords, how is it possible to attack the password lists, specifically the ones using NTLMv1? What are some of the new tools and features provided by Windows Server 2008? What two hardware considerations should be an important part of the planning process for a Windows Server 2008 deployment? what are the options for installing Windows Server 2008? How do you configure and manage a Windows Server 2008 core installation? What are some of the items that can be accessed via the System Properties dialog box? What?s the difference between guest accounts in Server 2003 and other editions? When a child domain is created in the domain tree, what type of trust relationship exists between the new child domain and the trees root domain? What Windows Server 2008 service is used to install client operating systems over the network? How the range of IP addresses is defined for a Windows Server 2008 DHCP server? What third-party certificate exchange protocols are used by Windows 2003 Server? What is the SYSVOL folder? What?s the difference between guest accounts in Server 2003 and other editions?

What?s New in Windows Server 2008 Active Directory Domain Services? What is LSDOU?