Desktop &amp Technical Support Interview Questions and Answers

12/14/2015
Desktop&ampTechnicalSupportInterviewQuestionsandAnswers
Desktop&ampTechnical
SupportInterviewQuestions
andAnswers
(7ratings)
Views:113,095
Likes:426
Publishedbyvinaaypalkar
Seemore
data:text/htmlcharset=utf8,%3Cdiv%20class%3D%22doc_info%20autogen_class_widgets_base%22%20id%3D%22autogen_id_415966399%22%20datatra
1/68
12/14/2015
2/68
12/14/2015
3/68
12/14/2015
4/68
12/14/2015
5/68
12/14/2015
6/68
12/14/2015
7/68
12/14/2015
8/68
12/14/2015
9/68
12/14/2015
data:text/htmlcharset=utf8,%3Cdiv%20class%3D%22doc_info%20autogen_class_widgets_base%22%20id%3D%22autogen_id_415966399%22%20datatr
10/68
12/14/2015
11/68
12/14/2015
12/68
12/14/2015
13/68
12/14/2015
14/68
12/14/2015
15/68
12/14/2015
16/68
12/14/2015
17/68
12/14/2015
18/68
12/14/2015
19/68
12/14/2015
20/68
12/14/2015
21/68
12/14/2015
22/68
12/14/2015
23/68
12/14/2015
24/68
12/14/2015
25/68
12/14/2015
26/68
12/14/2015
27/68
12/14/2015
28/68
12/14/2015
29/68
12/14/2015
30/68
12/14/2015
31/68
12/14/2015
32/68
12/14/2015
33/68
12/14/2015
34/68
12/14/2015
35/68
12/14/2015
36/68
12/14/2015
37/68
12/14/2015
38/68
12/14/2015
39/68
12/14/2015
40/68
12/14/2015
41/68
12/14/2015
42/68
12/14/2015
43/68
12/14/2015
44/68
12/14/2015
45/68
12/14/2015
46/68
12/14/2015
47/68
12/14/2015
48/68
12/14/2015
49/68
12/14/2015
50/68
12/14/2015
51/68
12/14/2015
52/68
12/14/2015
53/68
12/14/2015
54/68
12/14/2015
55/68
12/14/2015
56/68
12/14/2015
57/68
12/14/2015
58/68
12/14/2015
59/68
12/14/2015
clickRun,typedcpromo/advtoopentheActiveDirectoryInstallationWizardwith
theoptiontocreateanadditionaldomaincontrollerfromrestoredbackupfiles.
OntheDomainControllerTypepage,clickAdditionaldomaincontrollerforan
existingdomain,andthenclickNext.
OntheCopyingDomainInformationpage,candoanyofthefollowingsteps:
oClickFromtheserestoredbackupfiles,andtypeorBrowsetolocatetherestored
files,andthenclickNext.
OntheNetworkCredentialspage,typetheusername,password,anduserdomain
oftheuseraccountyouwanttouseforthisoperation,andthenclickNext.
TheuseraccountmustbeamemberoftheDomainAdminsgroupforthetarget
domain.
OntheDatabaseandLogFolderspage,typethelocationinwhichyouwantto
installthedatabaseandlogfolders,orclickBrowsetochoosealocation,andthen
clickNext.
OntheSharedSystemVolumepage,typethelocationinwhichyouwanttoinstall
theSysvolfolder,orclickBrowsetochoosealocation,andthenclickNext.
OntheDirectoryServicesRestoreModeAdministratorPasswordpage,typeand
confirmthepasswordthatyouwanttoassigntotheAdministratoraccountforthis
server,andthenclickNext.
UsethispasswordwhenstartingthecomputerinDirectoryServicesRestoreMode.
Restartthecomputer.
HowcanyouforciblyremoveADfromaserver,andwhatdoyoudolater?
CanIgetuserpasswordsfromtheADdatabase?
Demotetheserverusingdcpromo/forceremoval,thenremovethemetadatafrom
Activedirectoryusingndtsutil.ThereisnowaytogetuserpasswordsfromAD
AnotherwayouttooRestarttheDCisDSRMmode
a.Locatethefollowingregistrysubkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions
b.Intherightpane,doubleclickProductType.
c.TypeServerNTintheValuedatabox,andthenclickOK.
Restarttheserverinnormalmode
itsamemberservernowbutADentriesarestillthere.Promotetehservertoafake
domain sayABC.comandthenremovegracefullyusingDCpromo.Elseafterrestart
youcanalsousentdsutiltodometadataastoldintehearlierpost
WhataretheDS*commands?
ActiveDirectoryDomainServices(ADDS)commandlinetools,theyareavailableif
youhavetheADDSorActiveDirectoryLightweightDirectoryServices(ADLDS)
serverroleinstalled.Tousethesetools,youmustrunthemfromanelevated
commandprompt.Toopenanelevatedcommandprompt,clickStart,rightclick
CommandPrompt,andthenclickRunasadministrator.
Comman
Description
d
ExtendstheActiveDirectoryschemaandupdatespermissionsas
Adprep
necessarytoprepareaforestanddomainforadomaincontrollerthatruns
theWindowsServer2008operatingsystem.
ImportsandexportsdatafromActiveDirectoryusingfilesthatstoredata
Csvde
inthecommaseparatedvalue(CSV)format.Youcanalsosupportbatch
operationsbasedontheCSVfileformatstandard.
60/68
12/14/2015
Analyzesthestateofdomaincontrollersinaforestorenterpriseand
reportsanyproblemstohelpintroubleshooting.
Dcpromo InstallsandremovesActiveDirectoryDomainServices(ADDS).
Displaysandchangespermissions(accesscontrolentries)intheaccess
Dsacls
controllist(ACL)ofobjectsinADDS.
Dcdiag
Dsadd
Addsspecifictypesofobjectstothedirectory.
ExposesActiveDirectorydatathatisstoredinasnapshotorbackupasa
Dsamain
LightweightDirectoryAccessProtocol(LDAP)server.
ProvidesdatabaseutilitiesforActiveDirectoryLightweightDirectory
Dsdbutil
Services(ADLDS).
Dsget
Displaystheselectedpropertiesofaspecificobjectinthedirectory.
ProvidesmanagementfacilitiesforActiveDirectoryLightweightDirectory
Dsmgmt
Services(ADLDS).
Dsmod Modifiesanexistingobjectofaspecifictypeinthedirectory.
Movesasingleobjectinadomainfromitscurrentlocationinthedirectory
Dsmove toanewlocationorrenamesasingleobjectwithoutmovingitinthe
directorytree.
Dsquery QueriesADDSaccordingtospecifiedcriteria.
Deletesanobjectofaspecifictypeoranygeneralobjectfromthe
Dsrm
directory.
Creates,modifies,anddeletesdirectoryobjectsoncomputersrunning
Ldifde
WindowsServer2003orWindowsXPProfessionaloperatingsystems.
MakesitpossibleforuserstoperformoperationsagainstanLDAP
Ldp
compatibledirectory,suchasADDS.Theseoperationsincludeconnect,
bind,search,modify,add,anddelete.
MakesitpossibleforadministratorstomanageWindowsServer2003and
Netdom
Windows2000domainsandtrustrelationshipsfromacommandprompt.
Net
Addsordeletesacomputerfromadomaindatabase.
computer
Net
Adds,displays,ormodifiesglobalgroupsindomains.
group
Netuser Addsormodifiesuseraccounts,ordisplaysuseraccountinformation.
Nltest
Performsnetworkadministrativetasks.
Ntdsutil ProvidesmanagementfacilitiesforADDS.
Redirectsthedefaultcontainerfornewlycreatedcomputerstoaspecified
Redircmp targetorganizationalunit(OU)sothatnewlycreatedcomputerobjectsare
createdinthespecifictargetOUinsteadofinCN=Computers.
Redirectsthedefaultcontainerfornewlycreateduserstoaspecified
Redirusr targetOUsothatnewlycreateduserobjectsarecreatedinthespecific
targetOUinsteadofinCN=Users.
MakesitpossibleforadministratorstodiagnoseActiveDirectory
Repadmi
replicationproblemsbetweendomaincontrollersrunningWindows
n
operatingsystems.
Makesitpossibleforadministratorstoread,modify,anddeletethe
Setspn
ServicePrincipalNames(SPN)directorypropertyforanActiveDirectory
serviceaccount.
61/68
12/14/2015
WhatsthedifferencebetweenLDIFDEandCSVDE?Usageconsiderations?
Ldifde
Ldifdecreates,modifies,anddeletesdirectoryobjectsoncomputersrunning
WindowsServer2003operatingsystemsorWindowsXPProfessional.
YoucanalsouseLdifdetoextendtheschema,exportActiveDirectoryuserand
groupinformationtootherapplicationsorservices,andpopulateActiveDirectory
withdatafromotherdirectoryservices.
TheLDAPDataInterchangeFormat(LDIF)isadraftInternetstandardforafile
formatthatmaybeusedforperformingbatchoperationsagainstdirectoriesthat
conformtotheLDAPstandards.
LDIFcanbeusedtoexportandimportdata,allowingbatchoperationssuchasadd,
create,andmodifytobeperformedagainsttheActiveDirectory.
AutilityprogramcalledLDIFDEisincludedinWindows2000tosupportbatch
operationsbasedontheLDIFfileformatstandard.
Csvde
ImportsandexportsdatafromActiveDirectoryDomainServices(ADDS)usingfiles
thatstoredatainthecommaseparatedvalue(CSV)format.Youcanalsosupport
batchoperationsbasedontheCSVfileformatstandard.
CsvdeisacommandlinetoolthatisbuiltintoWindowsServer2008in
the/system32folder.ItisavailableifyouhavetheADDSorActiveDirectory
LightweightDirectoryServices(ADLDS)serverroleinstalled.Tousecsvde,you
mustrunthecsvdecommandfromanelevatedcommandprompt.Toopenan
elevatedcommandprompt,clickStart,rightclickCommandPrompt,andthenclick
Runasadministrator.
Csvde.exeisacommandlineutilitythatislocatedintheSystemRoot\System32
folderafteryouinstallWindows2000.Csvde.exeissimilartoLdifde.exe,butit
extractsinformationinacommaseparatedvalue(CSV)format.YoucanuseCsvde
toimportandexportActiveDirectorydatathatusesthecommaseparatedvalue
format.UseaspreadsheetprogramsuchasMicrosoftExceltoopenthis.csvfile
andviewtheheaderandvalueinformation.
AlthoughCsvdeissimilartoLdifde,Csvdehasasignificantlimitation:itcanonly
importandexportActiveDirectorydatabyusingacommaseparatedformat(.csv).
MicrosoftrecommendsthatyouusetheLdifdeutilityforModifyorDelete
operations.
IwanttolookattheRIDallocationtableforaDC.WhatdoIdo?
1.installsupporttoolsfromOSdisk(OSInst:Disk=>support=>tools=>suptools.msi)
2.InCommandprompttypedcdiag/test:ridmanager/s:system1/v(system1isthe
nameofourDC)
WhycantyourestoreaDCthatwasbackedup4monthsago?
Becauseofthetombstonelifewhichissettoonly60days
WhatareGPOs?
GroupPolicygivesyouadministrativecontroloverusersandcomputersinyour
network.ByusingGroupPolicy,youcandefinethestateofauser'swork
environmentonce,andthenrelyonWindowsServer2003tocontinuallyforcethe
GroupPolicysettingsthatyouapplyacrossanentireorganizationortospecific
groupsofusersandcomputers.
GroupPolicyAdvantages:
62/68
12/14/2015
Youcanassigngrouppolicyindomains,sitesandorganizationalunits.
Allusersandcomputersgetreflectedbygrouppolicysettingsindomain,siteand
organizationalunit.
NooneinnetworkhasrightstochangethesettingsofGrouppolicybydefaultonly
administratorhasfullprivilegetochange,soitisverysecure.
Policysettingscanberemovedandcanfurtherrewritethechanges.
GroupPolicyobjectsstoretheirGroupPolicyinformationintwolocations:
GroupPolicyContainer:TheGPCisanActiveDirectoryobjectthatcontains
GPOstatus,versioninformation,WMIfilterinformation,andalistof
componentsthathavesettingsintheGPO.ComputerscanaccesstheGPCto
locateGroupPolicytemplates,anddomaincontrollerdoesnothavethemost
recentversionoftheGPO,replicationoccurstoobtainthelatestversionof
theGPO.
GroupPolicyTemplate:TheGPTisafolderhierarchyinthesharedSYSVOL
folderonadomaincontroller.WhenyoucreateGPO,WindowsServer2003
createsthecorrespondingGPTwhichcontainsallGroupPolicysettingsand
information,includingadministrativetemplates,security,software
installation,scripts,andfolderredirectionsettings.Computersconnecttothe
SYSVOLfoldertoobtainthesettings.
ThenameoftheGPTfolderistheGloballyUniqueIdentifier(GUID)ofthe
GPOthatyoucreated.ItisidenticaltotheGUIDthatActiveDirectoryusesto
identifytheGPOintheGPC.ThepathtotheGPTonadomaincontrolleris
systemrootSYSVOLsysvol.
NameafewbenefitsofusingGPMC.
MicrosoftreleasedtheGroupPolicyManagementConsole(GPMC)yearsago,which
isanamazinginnovationinGroupPolicymanagement.Thetoolprovidescontrol
overGroupPolicyinthefollowingmanner:
EasyadministrationofallGPOsacrosstheentireActiveDirectoryForest
ViewofallGPOsinonesinglelist
ReportingofGPOsettings,security,filters,delegation,etc.
ControlofGPOinheritancewithBlockInheritance,Enforce,andSecurity
Filtering
Delegationmodel
BackupandrestoreofGPOs
MigrationofGPOsacrossdifferentdomainsandforests
Withallofthesebenefits,therearestillnegativesinusingtheGPMCalone.
Granted,theGPMCisneededandshouldbeusedbyeveryoneforwhatitisideal
for.However,itdoesfallabitshortwhenyouwanttoprotecttheGPOsfromthe
following:
RolebaseddelegationofGPOmanagement
Beingeditedinproduction,potentiallycausingdamagetodesktopsand
servers
ForgettingtobackupaGPOafterithasbeenmodified
ChangemanagementofeachmodificationtoeveryGPO
WhataretheGPCandtheGPT?WherecanIfindthem?
GPOsstoregrouppolicysettingsintwolocations:aGroupPolicycontainer(GPC)
(preferred)andaGroupPolicytemplate(GPT).TheGPCisanActiveDirectoryobject
thatstoresversioninformation,statusinformation,andotherpolicyinformation(for
example,applicationobjects).
63/68
12/14/2015
TheGPTisusedforfilebaseddataandstoressoftwarepolicy,script,and
deploymentinformation.TheGPTislocatedonthesystemvolumefolderofthe
domaincontroller.AGPOcanbeassociatedwithoneormoreActiveDirectory
containers,suchasasite,domain,ororganizationalunit.Multiplecontainerscanbe
associatedwiththesameGPO,andasinglecontainercanhavemorethanone
associatedGPO.
WhatareGPOlinks?WhatspecialthingscanIdotothem?
ToapplythesettingsofaGPOtotheusersandcomputersofadomain,site,orOU,
youneedtoaddalinktothatGPO.YoucanaddoneormoreGPOlinkstoeach
domain,site,orOUbyusingGPMC.KeepinmindthatcreatingandlinkingGPOsisa
sensitiveprivilegethatshouldbedelegatedonlytoadministratorswhoaretrusted
andunderstandGroupPolicy.
HowcanyoudeterminewhatGPOwasandwasnotappliedforauser?
Nameafewwaystodothat.
SimplyusetheGroupPolicyManagementConsolecreatedbyMSforthatvery
purpose,allowsyoutorunsimulatedpoliciesoncomputersoruserstodetermine
whatpoliciesareenforced.Linkinsources
NamesomeGPOsettingsinthecomputeranduserparts.
GroupPolicyObject(GPO)computer=ComputerConfiguration,User=User
ConfigurationNamesomeGPOsettingsinthecomputeranduserparts.
Whatareadministrativetemplates?
Administrativetemplates,(or.admfiles),enableadministratorstocontrolregistry
settingsusingGroupPolicy.ThesesettingsappearundertheAdministrative
Templatesfolderforbothuserconfigurationandcomputerconfigurationinthe
consoletreeoftheGroupPolicyObjectEditor,andinHTMLreportsproducedby
GPMC.
The.admfileissimplyatemplatefile(implementedastextfilewithan.adm
extension)thatprovidesthefriendlynameforthesettingandanexplanation.This
templatefileisusedtopopulatetheuserinterface.Thesettingsthataredeployed
toclientsarecontainedintheregistry.polfileinsidetheGPO.OnWindowsXPand
WindowsServer2003,eachregistrysettingcontainsa"Supportedon"tagthat
indicateswhichoperatingsystemversionssupportthatpolicysetting.Ifasettingis
specifiedanddeployedtoaclientoperatingsystemthatdoesnotsupportthat
setting,thesettingsareignored.These.admfilesarestoredintwolocationsby
default:insideGPOs,andinthe%windir%\inffolderonthelocalcomputer.
Whatsthedifferencebetweensoftwarepublishingandassigning?
PublishingSoftware
Whenyoupublishsoftwaretousers,youprovidethemwiththeoptionsof
downloadingandusingitiftheyneedit,orremovingitiftheynolongerhaveause
forit.
AssigningSoftware
Whenyouassignsoftware,usersmustdownloadandinstallthesoftware.Evenif
theychangecomputers,thetasktodownloadandinstallthesoftwarewillfollow
64/68
12/14/2015
them.Ifthesoftwareisassignedtothecomputer,thesoftwarewilldownload
automaticallyontheuser'snextlogin.Itcannotbeinstalledbytheuser.
WhatisActiveDirectoryschema?
ActiveDirectorySchemaisaMicrosoftManagementConsole(MMC)snapinthat
youcanusetoviewandmanagetheActiveDirectoryDomainServices(ADDS)
schema&ActiveDirectoryLightweightDirectoryServices(ADLDS)schemaobjects.
Theschemacontainsformaldefinitionsofeveryobjectclassthatcanbecreatedin
anActiveDirectoryforest.Theschemaalsocontainsformaldefinitionsofevery
attributethatcanormustexistinanActiveDirectoryobject.
TheActiveDirectorySchemasnapinincludestwocontainers:the
Classes
containerandthe Attributes container.Thesecontainersstoretheclassand
attributedefinitions.ThesedefinitionstaketheformofclassSchemaobjects,which
youcanviewinthe
Classes container,andattributeSchemaobjects,whichyoucan
viewinthe Attributes container.
WhatarethedomainfunctionallevelinWindowsServer2003?
WindowsServer2003DomainFunctionalLevel
WindowsServer2003domainfunctionallevelisthehighestlevelthatcanbe
specifiedforadomain.AlldomaincontrollersinthedomainarerunningWindows
Server2003.ThisbasicallymeansthatWindowsNT4andWindows2000domain
controllersarenotsupportedthesedomains.Oncethedomainlevelissetas
WindowsServer2003domainfunctionallevel,itcannotbeloweredtoanyofthe
previousdomainfunctionallevels.
areavailable inWindowsServer2003domain
AllActiveDirectorydomainfeatures
functionallevel:
LocalandGlobalgroups
DistributionGroups
Distributiongroupnesting
Securitygroupnesting
universalGroups
GroupconversionbetweenSecurityGroupsandDistributionGroups
GlobalCatalogsupport
SIDHistory
Upto1,000,000domainobjectsaresupported
Renamingdomaincontrollers
Updatelogontimestamp
Users/Computerscontainerredirection
Constraineddelegation
UserpasswordsupportontheInetOrgPersonobject
Howtocheckwhichdomainfunctionlevelissetforthedomain
1. OpentheActiveDirectoryDomainsAndTrustsconsole
2. Rightclicktheparticulardomainwhosefunctionallevelyouwantverify,and
selectRaiseDomainFunctionalLevelfromtheshortcutmenu.
3. TheRaiseDomainFunctionalLeveldialogboxopens
4. YoucanviewtheexistingdomainfunctionallevelforthedomaininCurrent
domainfunctionallevel.
65/68
12/14/2015
66/68
12/14/2015
67/68
12/14/2015
68/68

Desktop &amp Technical Support Interview Questions and Answers

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Desktop &amp Technical Support Interview Questions and Answers

Uploaded by

Copyright:

Available Formats

12/14/2015

You might also like