System Administrator

A domain controller (DC) or network domain controller is a Windows-based computer system that is used for storing user account data in a central database. It is the centerpiece of the Windows Active Directory service that authenticates users, stores user account information and enforces security policy for a Windows domain.

Active Directory provides a centralized control for network administration and security. Server computers configured with Active Directory are known as domain controllers. Active Directory stores all information and settings for a deployment in a central database, and allows administrators to assign policies and deploy and update software.

Group Policy allows you to implement specific configurations for users and computers. Group Policy settings are contained in Group Policy objects (GPOs), which are linked to the following Active Directory service containers: sites, domains, or organizational units (OUs).

There are two kinds of Group Policy objects:

★ Local Group Policy objects, are stored on individual computers.

★ Non-local Group Policy objects, which are stored on a domain controller, are available only in an Active Directory environment.

LDAP (Light-Weight Directory Access Protocol) determines how an object in an Active Directory should be named. LDAP is the industry standard directory access protocol, making Active Directory widely accessible to management and query applications. Active Directory supports LDAPv2 and LDAPv3.

A Group Policy Object (GPO) is a collection of settings that control the working environment of user accounts and computer accounts. GPOs define registry-based policies, security options, software installation and maintenance options, script options, and folder redirection options.

The SYSVOL folder stores the server copy of the domain's public files that must be shared for common access and replication throughout a domain.

All AD databases are stored in a SYSVOL folder and it's only created in an NTFS partition. The Active Directory Database is stored in the %SYSTEM ROOT%NDTS folder.

Garbage collection is the online defragmentation of the Active Directory which happens every 12 hours.

A domain is defined as a logical group of network objects (computers, users, devices) that share the same Active Directory database. A tree can have multiple domains.

The Domain Name System (DNS) is used to resolve human-readable hostnames like www.golbalguideline.com into machine-readable IP addresses like 69.173.221.64.

DNS servers use UDP port 53 but DNS queries can also use TCP port 53 if the former is not accepted.

Email servers can be of two types:

★ Outgoing Mail Server (SMTP)

Most outgoing mail servers use SMTP (Simple Mail Transfer Protocol) for sending emails. The outgoing mail server can belong to your ISP or to the server where you setup your email account.

★ Incoming Mail Server (POP3, IMAP, HTTP)

The incoming mail server is the server associated with an email address account. There cannot be more than one incoming mail server for an email account. In order to download your emails, you must have the correct settings configured in your email client program.

★ POP3 - port 110

★ IMAP - port 143

★ SMTP - port 25

★ HTTP - port 80

★ Secure SMTP (SSMTP) - port 465

★ Secure IMAP (IMAP4-SSL) - port 585

★ IMAP4 over SSL (IMAPS) - port 993

★ Secure POP3 (SSL-POP) - port 995

Forests, trees, and domains are the logical divisions in an Active Directory network.

★ A domain is defined as a logical group of network objects (computers, users, devices) that share the same active directory database.

★ A tree is a collection of one or more domains and domain trees in a contiguous namespace linked in a transitive trust hierarchy.

★ At the top of the structure is the forest. A forest is a collection of trees that share a common global catalog, directory schema, logical structure, and directory configuration. The forest represents the security boundary within which users, computers, groups, and other objects are accessible.

A lingering object is a deleted AD object that still remains on the restored domain controller in its local copy of Active Directory. They can occur when changes are made to directories after system backups are created.

When restoring a backup file, Active Directory generally requires that the backup file be no more than 180 days old. This can happen if, after the backup was made, the object was deleted on another DC more than 180 days ago.

A domain controller allows system administrators to grant or deny users access to system resources, such as printers, documents, folders, network locations, etc., via a single username and password.

The AD database is stored in C:WindowsNTDSNTDS.DIT.

Windows Deployment Services is a server role used to deploy Windows operating systems remotely. WDS is mainly used for network-based OS installations to set up new computers.

Dynamic Host Configuration Protocol assigns dynamic IP addresses to network devices allowing them to have a different IP address each time they are connected to the network.

Windows Server 2003 and 2008 have the ability to manually remove lingering objects using the console utility command REPADMIN.EXE.

When restoring a backup file, Active Directory generally requires that the backup file be no more than 180 days old. If you attempt to restore a backup that is expired, you may face problems due to lingering objects.