Where System Builders Talk Shop... : Study Group - Exam 70-294

Q&A from the Active Directory - Disaster Recovery webcast!

BOBblog — Sun, 21 Jan 2007 04:50:00 GMT

Hello All,

Here is the Q&A for the Active Directory - Disaster Recovery webcast!

Question: What stands for AD?
Answer: Active Directory

Question: What stands for DC and GC?
Answer: Domain Controller and Global Catalog Server

Question: Is there a way to change which attributes are not stripped from a principle when the principle is deleted in 2003?
Answer: yes --but this requires modification to the a class in the Schema which is generally not recommended

Question: can you show steps to disable inbound replication... show the lower in the directory tree
Answer: this will be demonstrated later but here it is: repadmin /options dc_name +DISABLE_INBOUND_REPL

Question: I ran into this scenario: 2 servers, (1) Windows 2000 SP4, (1) Windows 2003 SP1. 2003 server RAID crashed; Reload Win2003 to get server back up enough to run tape restore, run tape restore w/ system state included, rebooted. Now 2003 server cannot access 2000 server using UNC, get "permission denied". Able to access via \\192.168.1.123\sharename. What happened?
Answer: if you can access the share by IP and not by name then that tells me that Kerberos is not working. Look at anything that would cause Kerberos failures such as time sync issues bad machine account password here is a good link for troubleshooting these issues: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

Question: can the 60 day/ 180 days be increased?
Answer: yes, the change needs to be made on the configuration partition via adsiedit 1. In the Adsiedit tool, expand Configuration DomainControllerName, expand CN=Configuration, DC=ForestRootDomain, expand CN=Services, expand CN=Windows NT, right-click CN=Directory Service, and then click Properties. 2. Click the Attribute tab. 3. In the Select which properties to view list, click Optional. 4. In the Select a property to view list, click TombstoneLifetime. 5. In the Edit Attribute box, type the number of days that you want to set it to, click Set, and then click OK. Just don't decrease the value ---if you set it too low you will run into problem with Lingering Objects

Question: but if it is a fresh 2003 install, then lvr is enabled by default?
Answer: Not until you go into native mode and 2003 forest functional mode, then after that LVR is enabled on new objects or on existing objects when it is mdoified

Question: my forrest is upgraded, how to make my groups LVR?
Answer: You will need to be at Windows Server 2003 Forest functional mode --see: http://support.microsoft.com/kb/322692

Question: Does the restore process with Windows Backup work the same with Veritas Backup Exec?
Answer: It is very similiar but I would recommend going to their site and walking through their article to ensure nothing has changed. Some screens are different. They do have a published article.

Question: How do I check system state is current?
Answer: repadmin.exe /showbackup dc_name Check out this informative post on that command: http://blogs.msdn.com/brettsh/archive/2006/02/09/528708.aspx

To watch the on-demand webcast, please visit: http://www.msusapartnerreadiness.com/WS_abstract.asp?eid=15004864

Thanks,

BoB

Study Group for 70-294

BOBblog — Tue, 31 Oct 2006 06:59:00 GMT

We regret to inform you that the study group for 70-294 has been pushed back until after the holidays. We are still planning on delivering a series of webcast for the 4 core Windows 2003 MCSE exams but due to intense traveling for the Intel\Microsoft roadshow, we had to rearrange the timing of the study group. I will still be here to help answer any questions posted either to the blog or sent directly to study@microsoft.com.

Additionally, I will continue to post blogs on anything I think may help you prepare for the exams. We apologize for an inconvenience.

BoB

Exam Prep - Active Directory Benefits for Smaller Enterprises

BOBblog — Thu, 12 Oct 2006 22:37:00 GMT

While preparing for this exam I came across this white paper on Active Directory Benefits for Smaller Enterprises. You may want to read through this document and post any questions you have.

http://www.microsoft.com/WindowsServer2003/techinfo/overview/adsmallbiz.mspx

The white paper covers the following information, most of which is pertinent tot he exam:

Although many organizations have completed their Microsoft Active Directory deployment, there remain organizations that have either not completed deployment or have yet to take advantage of some of the important features of Active Directory. This white paper is designed to help small- and medium-sized organizations understand the business advantages that can be realized through the use of Windows Server 2003 and Active Directory. The paper was written based on feedback from business executives on the reasons why they chose to migrate to Active Directory and the ongoing benefits they have realized.

Included in This Document

•	What is Active Directory?
•	Benefits of Active Directory and Windows Server 2003
•	Increasing the Productivity of Users
•	Reducing the Burden of IT Administration
•	Improving Fault Tolerance to Minimize Downtime
•	Enhancing Security to Provide Better Peace of Mind
•	Leveraging the Capabilities of Active Directory-enabled Applications

BoB

Study Group preparation

BOBblog — Mon, 25 Sep 2006 21:58:00 GMT

Hello All,

As part of the Study Group preparation, I will post WebCast that I think are beneficial to the 70-294 exam. While these are not geared towards exam preparation, they do offer some insight that you may find useful:

The first one is coming up this week (Thursday 9/28/2006):

SB: Taking the Guesswork out of Active Directory

http://www.msreadiness.com/wscart.asp?eid=4538

The second webcast is on-demand. It was the first webcast I did as part of the BoB Team. It gives a good understanding of OU’s and Group Policies. We may need to go deeper into RoSP as we get closer to the Study Group.:

SB: Group Policy - specifically using GPMC

http://www.msreadiness.com/WS_abstract.asp?eid=15004137

Enjoy,

BoB

Study Group for Exam 70-294 (Active Directory Infrastructure)

BOBblog — Fri, 22 Sep 2006 04:35:00 GMT

BoB’s Study Group

It is that time again! We are going to start this study group with exam 70-294 Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure. This is due to some other Active Directory events that will be delivered during this time period. 70-293: Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure is not a prerequisite for this but definitely helps. Having a good understating of the networking components like DNS is ideal for this test.

The official kick off for this study group will be November 28^th. I wanted to get the blog started before the actually study group begins so we can all get on the same level and no one is left behind. I want to try and get a few mini-cast done as well. These mini-cast should help you understand the basic concepts of Active Directory, then the official study group will hopefully bring all these concepts together and help ensure that EVERYONE passes on the first try.

The book that we will use is listed here:

MCSE Self-Paced Training Kit (Exam 70-294): Planning, Implementing, and Maintaining a Microsoft® Windows Server™ 2003 Active Directory® Infrastructure

Author		Jill Spealman, Kurt Hudson, and Melissa Craft

Now with that said, if you have taken this test and did not pass or wanted clarification on something, please post it. I will try to get a mini-cast done on the subject or try to explain it either in a blog or in the official study guide.

Don’t be a stranger and post!

BoB