Windows Server 2003 Active Directory and Security questions | TechInte...

1 of 3

http://www.techinterviews.com/windows-server-2003-active-directory-a...

Search Tech Interviews

Tech Interviews
Prepare for job interviews with the questions and answers asked by high-tech employers
.NET

C++

Database

General

Hardware

Java

Networking

Puzzles

SAP ABAP

Testing

Unix/Linux

VB

Web dev

Windows

Windows >> Windows Server 2003 Active Directory and Security questions

4/30/2010 2:17 PM

Windows Server 2003 Active Directory and Security questions | TechInte...

2 of 3

http://www.techinterviews.com/windows-server-2003-active-directory-a...

Windows Server 2003 Active Directory and

Security questions
By admin | December 7, 2003

1. Whats the difference between local, global and universal groups? Domain local
groups assign access permissions to global domain groups for local domain resources. Global
groups provide access to resources in other trusted domains. Universal groups grant access to
resources in all trusted domains.
2. I am trying to create a new universal user group. Why cant I? Universal groups are
allowed only in native-mode Windows Server 2003 environments. Native mode requires that
all domain controllers be promoted to Windows Server 2003 Active Directory.
3. What is LSDOU? Its group policy inheritance model, where the policies are applied to Local
machines, Sites, Domains and Organizational Units.
4. Why doesnt LSDOU work under Windows NT? If the NTConfig.pol file exist, it has the
highest priority among the numerous policies.
5. Where are group policies stored? %SystemRoot%System32\GroupPolicy
6. What is GPT and GPC? Group policy template and group policy container.
7. Where is GPT stored? %SystemRoot%\SYSVOL\sysvol\domainname\Policies\GUID
8. You change the group policies, and now the computer and user settings are in
conflict. Which one has the highest priority? The computer settings take priority.
9. You want to set up remote installation procedure, but do not want the user to
gain access over it. What do you do? gponame> User Configuration> Windows
Settings> Remote Installation Services> Choice Options is your friend.
10. Whats contained in administrative template conf.adm? Microsoft NetMeeting
policies
11. How can you restrict running certain applications on a machine? Via group policy,
security settings for the group, then Software Restriction Policies.
12. You need to automatically install an app, but MSI file is not available. What do
you do? A .zap text file can be used to add applications using the Software Installer, rather
than the Windows Installer.
13. Whats the difference between Software Installer and Windows Installer? The
former has fewer privileges and will probably require user intervention. Plus, it uses .zap files.
14. What can be restricted on Windows Server 2003 that wasnt there in previous
products? Group Policy in Windows Server 2003 determines a users right to modify network
and dial-up TCP/IP properties. Users may be selectively restricted from modifying their IP
address and other network configuration parameters.
15. How frequently is the client policy refreshed? 90 minutes give or take.
16. Where is secedit? Its now gpupdate.
17. You want to create a new group policy but do not wish to inherit. Make sure you
check Block inheritance among the options when creating the policy.
18. What is "tattooing" the Registry? The user can view and modify user preferences that are
not stored in maintained portions of the Registry. If the group policy is removed or changed,
the user preference will persist in the Registry.
19. How do you fight tattooing in NT/2000 installations? You cant.
20. How do you fight tattooing in 2003 installations? User Configuration - Administrative
Templates - System - Group Policy - enable - Enforce Show Policies Only.
21. What does IntelliMirror do? It helps to reconcile desktop settings, applications, and stored
files for users, particularly those who move between workstations or those who must
periodically work offline.
22. Whats the major difference between FAT and NTFS on a local machine? FAT and
FAT32 provide no security over locally logged-on users. Only native NTFS provides extensive
permission control on both remote and local files.
23. How do FAT and NTFS differ in approach to user shares? They dont, both have
support for sharing.
24. Explan the List Folder Contents permission on the folder in NTFS. Same as Read &
Execute, but not inherited by files within a folder. However, newly created subfolders will
inherit this permission.
25. I have a file to which the user has access, but he has no folder permission to read
it. Can he access it? It is possible for a user to navigate to a file for which he does not have
folder permission. This involves simply knowing the path of the file object. Even if the user
cant drill down the file/folder tree using My Computer, he can still gain access to the file using
the Universal Naming Convention (UNC). The best way to start would be to type the full path
of a file into Run window.
26. For a user in several groups, are Allow permissions restrictive or permissive?
Permissive, if at least one group has Allow permission for the file/folder, user will have the
same permission.
27. For a user in several groups, are Deny permissions restrictive or permissive?

Job Interview Question Articles

C# Interview Questions and Answers
QTP Interview Questions and Answers
C++ Interview Questions and Answers
PHP Interview Questions and Answers
XML Interview Questions and Answers
JavaScript Interview Questions and Answers
Asp.Net Interview Questions and Answers
J2EE Interview Questions and Answers
ABAP Interview Questions and Answers
Perl Interview Questions and Answers
Java Interview Questions and Answers

Resources
Technology Question and Answer Website
How to dance around the salary-expectation question
10 mistakes managers make during job interviews
ID Maker
Stupid interview questions
How to Answer These Tricky Interview Questions
Seven tips for writing an online profile for LinkedIn,
MySpace or Facebook
Video surveillance
Ink cartridges
Laptop computers
Affordable life insurance
Ink cartridges

Tutorials
AJAX Tutorials
Dealing with your job
Getting a job
JavaScript tutorials
Job interview tips from Yahoo! HotJobs
MySQL tutorials
Retiring from your job
Ruby on Rails tutorials
Salary guide for IT jobs
Self-employment
TechInterviews guides in PDF
Understanding pointers
XML Tutorials
XUL tutorials

RSS Feeds
All posts
All comments

4/30/2010 2:17 PM

Windows Server 2003 Active Directory and Security questions | TechInte...

3 of 3

http://www.techinterviews.com/windows-server-2003-active-directory-a...

Powered by WordPress. Built on the Thematic Theme Framework.

4/30/2010 2:17 PM