1. Describe the process of demoting a Domain Controller and the significance if

Question

1. Describe the process of demoting a Domain Controller and the significance if it is the last DC in the domain or if it is not.

2. Describe the purpose for creating Active Directory sites and its advantages.

3. List the users and/or groups that have the local logon rights to a Domain Controller. In which security policy and GPO is this information/setting? What is the difference between explicitly assigning a user the local logon right to the DC and making the user a member of a group with the local logon right to the DC?

4. Explain in detail the roaming profile. Address the following points:

i. What is the purpose of a roaming profile?

ii. Settings that have to made, folders that have to be created, configuration of the folders.

iii. Describe the sequence of events when logging on as a user with a roaming profile as described in the Week 5 / Walkthrough 2 exercise but in your words.

iv. Describe what happens when logging on and the network resource for the roaming profile is not accessible.

v. Describe what happens when logging off and the network resource for the roaming profile is not accessible – there was no exercise in the weekly walkthroughs, but you could simulate it. Logon with the roaming profile from XP then switch to Server 2008 and disable the share then logoff from XP.

vi. The advantages and disadvantages of roaming user profiles.

5. Describe the differences between AD DS (Active Directory Domain Services) vs. AD LDS (Active Directory Lightweight Directory Services).

6. What is the purpose for AD LDS (Active Directory Lightweight Directory Services)? In what situations might an organization choose to utilize AD LDS?

7. What security features does AD RMS (Active Directory Rights Management Services) offer? What are the requirements for using AD RMS, for both server and client?

8. Describe the purpose for using AD FS (Active Directory Federated Services). List and describe the components that are necessary for using AD FS.

Explanation / Answer

1.Removing the last domain controller in an area by utilizing the Windows interface:

The Active Directory Domain Services Installation Wizard gives every one of the means that you have to expel the domain.During space expulsion, the Active Directory Domain Services Installation Wizard shows a rundown of all the application registry parcels that are put away on the area controller.

On the off chance that the application index segments were made by an application other than Active Directory Domain Services (AD DS), first attempt to utilize a suitable apparatus that is given by the application to expel these catalog partitions.If the application does not give such an instrument, you can let the Active Directory Domain Services Installation Wizard evacuate the registry segments.

Application registry segments that are made by AD DS, for example, the DomainDNSZones application catalog parcel, can't be held in the event that you expel AD DS.If the domain controller has any Active Directory– coordinated DNS zones, the wizard evacuates those zones.By default, the wizard likewise endeavors to expel the Domain Name System (DNS) designations for those zones that point to the area controller.

2.Active Directory Sites:

Dynamic Directory (AD) destinations, which comprise of all around associated systems characterized by IP subnets that assistance characterize the physical structure of your AD, give you much better control over replication movement and validation activity than the control you get with Windows NT 4.0 domains.Because AD depends on IP, all LAN fragments ought to have a characterized IP subnet.This makes making your AD site structure clear; you basically gather all around associated subnets to frame a site.

Benifits:

Making AD locales benefits you in a few ways, the first is that making these destinations gives you a chance to control replication movement over WAN links.This control is critical in Windows 2000 on the grounds that any Win2K area controller (DC) can start changes to AD.To guarantee that a change you make on one DC proliferates to all DCs, Win2K utilizes multimaster replication (rather than the single-ace replication that NT 4.0 uses).You may surmise that multimaster replication would make it hard to get ready for AD replication's impact on your WAN connections, yet you can defeat this deterrent utilizing AD destinations.

Related Questions

Navigate

• Browse (All)
• Browse 1
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.