Configure Active Directory in a Complex Enterprise Environment Flashcards
Where do you go to add domains or forests?
Within the ADDSC wizard on the Domain Options screen
What tool do you use to configure domain and forest functional levels?
Active Directory Domains and Trusts
Within AD DT, how do you configure domain and forest functional levels?
To raise the forest level, right click on AD DT (top node) and select Raise Forest Functional Level
To raise the domain level, right click on domain and select Raise Domain Functional Level
Domain functional levels can go lower than Forest functional levels. True or False?
False. Domain functional levels can go higher than forest functional levels but never lower.
What tool do you use to configure User Principal Name (UPN) suffixes?
Active Directory Domains and Trusts.
Right click on AD DT (top node), and select properties.
Enter name of alternative UPN suffixes to be added.
What is a forest trust?
A forest trust is the trust relationship between two different forests.
How do you configure a forest trust?
Within AD DT > Right click on domain and select properties > Trusts tab > Launch “New Trust” wizard specifically selecting Forest Trust on the Trust Type screen.
What is an external trust?
The trust relationship between an AD forest and a NT 4.0 domain structure.
What is a realm trust?
The trust relationship between an AD forest and a Kerberos, non-AD domain structure.
What is a shortcut trust?
The trust relationship between AD trees within a forest to speed up authentication
What is SID filtering and how is it configured?
Aka Selective authentication, is when, by default, access to domain resources is not allowed unless permissions are given.
Is configured when going through the new trust wizard and selecting authentication type.
What is name suffix routing?
The routing of child domains to parent domain’s DC for authentication.
How do you configure name suffix routing?
Within AD DT > Domain properties > Trust properties > Name Suffix Routing tab
What are 3 main reasons for using AD Sites?
- Replication control
- Enhance GPO deployment
- Enhance use of SRV records
What PowerShell cmdlet is used to create a new AD site?
New-ADReplicationSite
How do you create a new site within AD SS?
Right click on Sites container and select New Site
How do you create a new subnet within AD SS?
Right click on Subnets container and select New Subnet
How do you create a new site link within AD SS?
Right click on Inter-Site Transports container (IP/SMTP) and select New Site Link
What are 3 ways to implement site coverage?
- utilizing SRV records pointing sites to DCs.
- RODCs deployed within the site.
- Subnet added to a site already containing a DC.
How do you manage registration of SRV records?
Within DNS Manager > Forward Lookup Zones > > _tcp
How do you move domain controllers between sites within AD SS?
Right click on DC and select Move then select available site
What protocol can be used with a slow, unreliable WAN link between your sites?
SMTP
What is the default time for replication over an IP site link?
180 minutes
When configuring a trust between to domains, what is result of selecting domain-wide authentication?
Domain-wide authentication provides users from a trusted domain the same level of access to local resources as for users from the local forest.
When configuring a trust between two domains, what is the result of selecting selective authentication?
Selective authentication allows users from a trusted domain to authenticate only to those resources to which they are explicitly allowed to authenticate.
How do you prioritize certain site links over others?
By configuring the cost of the site links.
Within AD SS > Sites > Inter-Site Transports > IP, open the properties of the site and within the General tab, the Cost value can be changed. The lower the value, the higher the priority.
Site link bridging is enabled by default. True or False?
True.
How do you disable site link bridging?
Right click IP under Inter-Site Transports within AD SS.
On the General tab, uncheck the “Bridge all site links” option.
What service, on DCs, is responsible for registering and periodically refreshing SRV locator records?
netlogon service
If users are experiencing slow logon times, what may need to be done to resolve this issue?
Restart the netlogon service on the corresponding domain controller.
