Active Directory

Windows 2003 must be running with SP2

Run adprep /forestprep

Run adprep /domainprep

Start the installation from Windows 2008 DVD

Domain level must be in Native Mode

Installation must be started from windows 2003 OS

AD Domain Services auditing, Fine-Grained Password Policies,Read-Only Domain Controllers,Restartable Active Directory Domain Services

Read only Domain Controller, organizations can easily deploy a domain controller in locations where physical security cannot be guaranteed.

The Sysvol folder on a Windows domain controller is used to replicate file-based data among domain controllers. %systemroot%SYSVOL

90 minutes give or take.

Unlimited. Remember, though, that it’s the Administrator account, not any account that’s part of the Administrators group.

Admin$, Drive$, IPC$, NETLOGON, print$ and SYSVOL.

Same as Read & Execute, but not inherited by files within a folder. However, newly created subfolders will inherit this permission.

%SystemRoot%SYSVOLsysvoldomainnamePoliciesGUID

Group policy template and group policy container.

%SystemRoot%System32GroupPolicy

Domain local groups assign access permissions to global domain groups for local domain resources. Global groups provide access to resources in other trusted domains. Universal groups grant access to resources in all trusted domains.

It’s group policy inheritance model, where the policies are applied to Local machines, Sites, Domains and Organizational Units

is a command line tool used to monitor and troubleshoot replication on a computer running Windows.

• Checks replication consistency between replication partners.

• Monitors replication status.

• Displays replication metadata.

• Forces replication events.

NETDOM is a command-line tool that allows management of Windows domains and trust relationships

ADSI Edit is an LDAP editor for managing objects in Active Directory. This Active Directory tool lets you view objects and attributes that are not exposed in the Active Directory Management Console.

Replmon is the first tool you should use when troubleshooting Active Directory replication issues

Netdom query fsmo OR Replmon.exe

repadmin.exe /options * and use IS_GC for current domain options.

nltest /dsgetdc:corp /GC

A global catalog server is a domain controller that, in addition to its full, writable domain directory partition replica, also stores a partial, read-only replica of all other domain directory partitions in the forest

Global group's membership is limited to accounts from the same domain. The membership is replicated in its own domain only.

Universal group's memership is limited to accounts from the same forest.The membership is replicated across the forest