A server is a computer that manages network resources and makes them available to authorized users. Kerberos is an authentication protocol that provides encryption during authentication. Active Directory installation can be verified by checking SRV records in DNS, verifying the SYSVOL folder, and database and log files, and using commands like Dcdiag and Net share.

1. SERVER INTERVIEW QUESTIONS
what is server?
Ans. A server is an computer which manages all the network resoures and make avilable for
athourised user.
What is kerberos? what is the port No of kerberos?
Ans. Kerberos is an authentication protocol, whic provides encryption while authenticating client. Port
no is 88.
How dow you check whether Active Directory has been installed properly or not?
Ans.
By checking SRV Records In DNS Server.After Active Diretory is installed, DC will register SRVrecords in
DNS.
Verify SYSVOL Folder.
Verify Database and Log files ,NTDS.DIT,edb.*,Res*.log
Dcdiag command to test Domain.
Net share command to view sysvol files.
what is meant by application server? what is the main difference between appilication server and
webserver? what extra services offered by application server than web server?
Ans.
APPLICATION SERVER WEB SERVER
An Application Server supports HTTP,TCP/IP and
manymore protocols.
A Web Server understands and supports only HTTP
protocol
Features such as Caches,Clusters,Load Balancing
are there in ApplicationServers.
Features such asCaches,Clusters,Load Balancing
are not available in Web Servers.
Application server can work as web server. It cannot act as a Application server.
We can configure Domain services on Application
server.
Web server doesn’t support Domain services.
What are the different types of Servers?
Ans. Different Types of Servers:
Web Server: Web server provides static content such as HTML, CSS (cascade style sheets), images,
audio, video files to a web browser by loading the file from its disk and transferring it across the
network to the user's web browser. This exchange is mediated by the browser and the server,
communicating using HTTP (Hyper Text Transfer Protocol).
E.g. Apache webserver, IIS
Application Server: Application is a more advanced server where it can compute things on the fly and
collect data from multiple sources and serve the user request.
E.g. Weblogic server, WebSphere server, JBoss
Database Server: It manages the data in the database and allows user to fire different queries. Server
runs the query and serves only the requested data.
Eg. Oracle Server, SQL Server, DB2 Server, MySql Server
Audio/Video Server: It provides multimedia capabilities to websites by helping the user to broadcast
streaming multimedia content.

2. SERVER INTERVIEW QUESTIONS
Chat Server: It serves the users to exchange data in an environment similar to Internet newsgroup which
provides real time discussion capabilities.
FTP Server: It provides a secure file transfer between computers while ensuring file security and transfer
control. It uses FTP protocol.
Mail Server: It transfers and stores mails over corporate networks through LANs, WANs and across the
Internet.
E.g. Microsoft Email server.
News Server: It serves as a distribution and delivery source for many public news groups, approachable
over the USENET news network.
Proxy Server: It acts as a mediator between a client program and an external server to filter requests,
improve performance and share connections.
Telnet Server: It enables the users to log on to a host computer and execute tasks as if they are working
on a remote computer.
6. What is Active Directory schema?
Ans.The Active Directory schema contains formal definitions of every object class that can be created in
an Active Directory forest it also contains formal definitions of every attribute that can exist in an Active
Directory object.
7. What is global catalog server?
Ans.Global Catalog Server maintains full information about its own domain and partial information
about other domains. It is a forest wide role. Port no:3268, 3269
it is also taking part of AD replication.
8. Which is the default protocol used in directory services?
Ans.Light wait directory Access Protocol (ldap) is the default protocol used in directory services.
9. What is IPv6?
Ans.Internet Protocol version 6 (IPv6) is a network layer IP standard used by electronic devices to
exchange data across a packet-switched internet work. It follows IPv4 as the second version of the
Internet Protocol to be formally adopted for general use.
10. What are the physical & logical components of ADS?
Ans.Physical components of ADS are computers,sites,dc.
Logical components of ADS are user, ou.
11. What is a site?
Ans.One or more well-connected highly reliable and fast TCP/IP subnets. A site allows administrator to
configure active directory access and replication topology to take advantage of the physical network.
12. Which is the command used to remove active directory from a domain controller?

3. SERVER INTERVIEW QUESTIONS
Ans.DCPROMO to add/remove active directory but first ADC should be removed before DC if we want to
remove DC first then check this server is last domain controller in domain.
13. How we can create console, which contain schema?
Ans.We have to open the register to see the schema master fsmo role regser 32 schmmgmt.
14. What is trust?
Ans.To allow users in one domain to access resources in another, AD uses trust. Trust is automatically
produced when domains are created. The forest sets the default boundaries of trust, not the domain,
and implicit trust is automatic. As well as two-way transitive trust, AD trusts can be shortcut (joins two
domains in different trees, transitive, one- or two-way), forest (transitive, one- or two-way), realm
(transitive or nontransitive, one- or two-way), or external (nontransitive, one- or two-way) in order to
connect to other forests or non-AD domains. AD uses the Kerberos V5 protocol, although NTLM is also
supported and web clients use SSL/TLS.
15. What is the file that’s responsible for keep all Active Directory database?
Ans.NTDS.dit is the file that’s responsible for keep all Active Directory database.
16. What is the concept for authoritative and nonauthoritative restoration?
Ans.Non-authoritative restore: which accept the entries from other domain controller after the restoed
data.
Authoritative: Not accept the entries from other domain controller.
17. What is the ntds.dit file default size?
Ans.The ntds.dit file default size is 40 mb.
18.What is DNS?
DNS is Domain Name Service. It’s mainly used to resolve from host name(FQDN-Fully Qualified Domain
Name) to IP address and IP address to host name.DNS mainly used in Internet. DNS divide in form of
hierarchical.
19. What is DHCP?
DHCP is Dynamic Host Configuration Protocol. It is use to provide IP address dynamically to client
machine. If that client not able to find DHCP server then client machine will go for APIPA (We have
range for APIPA which is 169.254.0.1-169.254.255.254).
20. What is Sysvol?
Sysvol folder on a Windows 2003 domain controller is used to replicate file-based data among domain
controllers. Because junctions are used within the Sysvol folder structure, Windows NT file system
(NTFS) version 5.0 is required on domain controllers throughout a Windows 2000 distributed file system
(DFS) forest.
21. What is AD Naming Context?
There is 3 AD Naming Context
1) Domain Partition
2) Configuration Partition
3) Schema Partition
22. Why are sites used for?

4. SERVER INTERVIEW QUESTIONS
Site is used to create geographical partitions.
23. What are the Support Tools? Why do I need them?
Support tools are the Pack of tools which are used to diagnose the AD components. They are used to
troubleshoot analyze for resource specific diagnostics.
24. What is tombstone?
Tombstone is the time period object for any deleted object to be removed from Active directory
25. What are the FSMO roles? Explain in brief?
PDC Emulator – It provided Backward compatibility to PDC in Pre Windows 2000 Domains and also use
for Time Server Syncronization.The main use of PDC Emulator is also for user authentication when user
account is lockout or athenticating DC is not avilable.
RID Master – RID Master role is responsible for tracking and for assigning unique relative IDs to domain
controllers whenever new objects are created such as users or computers.
For example DC one is given RIDs 1-4999 and DC two is given RIDs 5000 – 9999.
Infrastructure Master – It is responsible for updating users and group information by checking with
Global Catalog Server.The failure only impacts Administrators that are attempting to move user
accounts, or rename them.
Domain Naming Master -It is responsible for tracking all the domains within the entire Active Directory
forest to ensure that duplicate domain names are not created. It is contacted when new domain is
created or deleted from Tree or Forest. My point is it’s worth the price to confine joining and leaving
the domain operations to one machine, and save the tiny risk of getting duplicate names or orphaned
domains.
Schema Master – It controls which objects are added, changed, or removed from the schema.
26. What is Forest?
A forest is a group of one or more domain trees that do not form a contiguous namespace but may
share a common schema and global catalog. There is always at least one forest on a network, and it is
created when the first Active Directory–enabled computer (domain controller) on a network is installed.
27. What does the physical structure of active directory contain?
Physical structures include domain controllers and sites.
28. What is Distributed File System (DFS)?
Distributed File System (DFS) is a server component that provides a unified naming convention for
folders and files stored on different servers on a network. DFS lets you create a single logical hierarchy
for folders and files that is consistent on a network, regardless of where on the network those items are
actually stored.
29. What is File Replication Service (FRS) ?
Every domain controller has a built-in collection of folders named SYSVOL (for System Volume). The
SYSVOL folders provide a default Active Directory location for files that must be replicated throughout a
domain. (FRS) is responsible for replicating files in the SYSVOL folders between domain controllers. FRS
uses site boundaries to govern the replication of items in the SYSVOL folders.

5. SERVER INTERVIEW QUESTIONS
30. What is AD ?
Its a centeralised database that contains information on users, groups, computers, servers and security
policies
Domain, Organizational Unit, User, Computer, Contact, Group, Shared Folder and Shared Printer
31.What is Domain ?
Domains are the main logical structure in Active Directory because they contain Active Directory
objects.
32.What is OU ?
OU is a container that enables you to organize objects such as users, computers and even other OUs in a
domain to form a logical administrative group.
33.What is Tree ?
When you group multiple domains into a hierarchical structure by adding child domains to a parent
domain, you are basically forming a domain tree.
34.What is Site ?
Site is a group of computers or server in a same or different subnets connected with highly reliable, fast
and not very expensive connection.
35.What is Site Link ?
It represent a set of sites that can communicated at uniform cost trough the intersite transport.
36. What are Active Directory Database files ?
NTDS.dit
edb.log
edb.chk
res1.log and res2.log
Schema Partition
Schema partition data include information on the objects that can be created in Active Directory and is
replicated to each domain controller in domains/forests.
Configuration Partition
Objects stored in the configuration partition relate to the domain structure and replication topology,
and is replicated to each domain controller in each domain, and in a forest.
Domain Partition
All objects that are stored in a domain exist in the domain partition. Domain partition data is replicated
to the domain controllers within a domain.
A domain partition contains information about users, groups, computers and organizational units. It is
replicated to all domain controllers of that domain.
Application Partition
Application partitions store information about application in Active Directory.
As an example of application partition, if you use a Domain Name System (DNS) that is integrated with
Active Directory you have two application partitions for DNS zones — ForestDNSZones and

6. SERVER INTERVIEW QUESTIONS
DomainDNSZones.
37. What is Group
A group can be defined as a collection of accounts that are grouped together so that Administrators can
assign permissions and rights to the group as a single entity.
Types of Groups
Security groups: A security group is a collection of users who have the same permissions to resources,
and the same rights to perform certain system tasks.
Distribution groups: Distribution groups are created to share information with a group of users through
e-mail messages.
38.Types of Group Scope
Global groups: Global groups are containers for user accounts and computers accounts in the domain,
and are used to assign permissions to objects that reside in any domain in a tree or forest.
Domain Local groups: Domain local groups can have user accounts, computer accounts, global groups,
and universal groups from any domain as group members.
Universal groups: User accounts, computers accounts, global groups, and universal groups from any
domain.
dsget group -scope [To Manage Groups from AD]
39. What are the different types of DNS records?
Different types of information can be associated with a domain name by creating different resource
records for the name. Each resource record provides a specific type of information. Below is a listing and
brief description of the DNS resource records supported by DPT.
Start of Authority (SOA): Designates the start of a zone.
Address (A):Designates an IP address for the domain name.
Mail Exchange (MX): Designates a mail server that will accept mail for the domain name.
Pointer (PTR):Specifies the domain name associated with an IP address.
Name Server (NS):Specifies the name servers the domain.
Canonical Name (CNAME):Maps one domain name to another domain name (aliasing).
Host Information (HINFO):Specifies host machine type and host operating system.
40..What is a zone transfer?
The process of copying these records from the primary DNS server to Secondary DNS providers is called
a zone transfer.
Primary Zone : Where DNS server can host and load the master copy of the zone and also only one
server is allowed to accept dynamic updates.
Secondary Zone : Its the DNS Server which gets the data for its zones from another name server
Directory-integrated Zone : Zones stored this way are located in the Active Directory tree under the
domain objec container. Each directory-integrated zone is stored in a dnsZone container. Active
Directory
integrated zones will replicate this information to other domain controllers in that domain.

7. SERVER INTERVIEW QUESTIONS