Basic Flashcards
What is AD DS?
This is a server that is running the Active Directory Domain Services Role
What is AD
his is just an abbreviation for Active Directory
What is ADWS?
This service was introduced in Windows Server 2008 R2. It is automatically installed with ADDS or ADLDS role and is configured to run automatically. This service provides remote management of any local directory services.
Explain a domain
The domain is a logical structure of containers and objects within Active Directory. A domain contains the following components:
* A hierarchical structure for users, groups, computers and other objects
* Security services that provide authentication and authorization to resources in the domain and other domains
* Policies that are applied to users and computers
A DNS name to identify the domain. When you log into a computer that is part of a domain you are logging into the DNS domain name. My DNS domain is ad.activedirectorypro.com, this is how my domain is identified.
What is a domain tree
When you add a child domain to a parent domain you create what is called a domain tree. A domain tree is just a series of domains connected together in a hierarchical fashion all using the same DNS namespace. If activedirectorypro.com was to add a domain called training, or videos it would be named training.activedirectorypro.com and videos.activedirectorypro.com. These domains are part of the same domain tree and a trust is automatically created between the parent and child domains.
What functional levels determine?
Functional levels determine what capabilities are available in the domain. Higher functional levels allow you to use the latest and greatest technologies in your Active Directory domain. When possible use the highest functional levels for your domain controllers.
What is a Forest?
A forest is a collection of domain trees. The domain tree shares a common schema and configuration container. The domain tree is connected together through a transitive trust. When you first install Active Directory and create a domain you are also creating a forest.
What is the meaning of FQDN?
Fully Qualified Domain name is the hostname + the domain, for example, my domain is ad.activedirectorypro.com, a computer in the domain with hostname PC1 so the FQDN would be pc1.ad.activedirectorypro.com
What is FSMO Roles?
Flexible Single Master Operator (FSMO) Roles
A domain controller has multiple functions that are referred to as the FSMO roles. These roles are all installed on the first domain controller in a new forest, you can move roles across multiple DCs to help with performance and failover.
How many FSMO roles the AD have?
5
Schema Master
Domain Naming Master
PDC Emulator
RID Master
Infrastructure Master
Define the FSMO Role SCHEMA MASTER
The schema master is a forest wide role that handles all the changes to the Active Directory schema.
Define the FSMO Role Domain Naming Master
This is a forest wide role that is the master of domain names. It handles the namespace and adding removing domain names.
Define the FSMO Role PDC Emulator
This role handles password changes, user lockouts, group policy and is the time server for the clients.
Define the FSMO Role RID Master
This role is responsible for processing RID pool requests from all DCs within the domain. When objects such as users and computers are created they get assigned a unique SID and a relative ID (RID). The RID master role ensures objects do not get assigned the same SID and RIDs.
Define the FSMO Role Infrastructure Master
This is a domain wide role used to reference objects in other domains. If users from Domain A are members of a security group in Domain B, the infrastructure master role is used to reference the accounts in the correct domain.
