You are on page 1of 1

1.

1. CanIdeploynonMSIsoftwarewithGPO?

2.

Yes,youcan.ApartfromMSIpackages,GPOalsosupportsdeploymentofZAPfiles
Howfrequentlyistheclientpolicyrefreshed?

3.

Bydefault,grouppolicyisupdatedinthebackgroundevery90minutes.Youcanspecify
anupdateratefrom0to44,640minutes(31days).Ifyouselect0minutes,thecomputer
triestoupdateGroupPolicyevery7seconds.However,becauseupdatesmightinterfere
withusers'workandincreasenetworktraffic,veryshortupdateintervalsarenot
appropriateformostinstallations.
TherefreshintervalcanbeconfiguredmanuallyusinggrouppolicyGPO>Computer
Configuration>AdministrativeTemplates>System>GroupPolicy>SetGroup
PolicyrefreshintervalforComputers
HowdoestheGroupPolicyNoOverrideandBlockInheritancework?

4.

NoOverrideThispreventschildcontainersfromoverridingpoliciessetathigherlevels
BlockInheritanceStopscontainersinheritingpoliciesfromparentcontainers
WhycantyourestoreaDCthatwasbackedup4monthsago?

5.

Thereasonis'Tombstoning'.Ifadomaincontrollerwasrestoredfromabackupthatwas
olderthanthetombstonelifetime,thenthedomaincontrollermightcontaindeleted
objects,andbecausethetombstonesaredeletedfromthereplica,thedeletioneventdoes
notreplicateintotherestoreddomaincontroller.ThisiswhyBackupdoesnotallowyou
torestoredatafromabackupthatisolderthanthetombstonelifetime.
Moredetailsabouttombstoninghttp://www.systemadminguide.in/2013/11/active
directorytombstone.html
IwanttolookattheRIDallocationtableforaDC.WhatdoIdo?

6.

Dcdiag.exe/TEST:RidManager/v|find/i"AvailableRIDPoolfortheDomain"
CanyouconnectActiveDirectorytoother3rdpartyDirectoryServices?Namea

fewoptions.

MicrosoftIdentityIntegrationServer(MIIS)
ForefrontIdentityManager(FIM)

You might also like