Professional Documents
Culture Documents
1. CanIdeploynonMSIsoftwarewithGPO?
2.
Yes,youcan.ApartfromMSIpackages,GPOalsosupportsdeploymentofZAPfiles
Howfrequentlyistheclientpolicyrefreshed?
3.
Bydefault,grouppolicyisupdatedinthebackgroundevery90minutes.Youcanspecify
anupdateratefrom0to44,640minutes(31days).Ifyouselect0minutes,thecomputer
triestoupdateGroupPolicyevery7seconds.However,becauseupdatesmightinterfere
withusers'workandincreasenetworktraffic,veryshortupdateintervalsarenot
appropriateformostinstallations.
TherefreshintervalcanbeconfiguredmanuallyusinggrouppolicyGPO>Computer
Configuration>AdministrativeTemplates>System>GroupPolicy>SetGroup
PolicyrefreshintervalforComputers
HowdoestheGroupPolicyNoOverrideandBlockInheritancework?
4.
NoOverrideThispreventschildcontainersfromoverridingpoliciessetathigherlevels
BlockInheritanceStopscontainersinheritingpoliciesfromparentcontainers
WhycantyourestoreaDCthatwasbackedup4monthsago?
5.
Thereasonis'Tombstoning'.Ifadomaincontrollerwasrestoredfromabackupthatwas
olderthanthetombstonelifetime,thenthedomaincontrollermightcontaindeleted
objects,andbecausethetombstonesaredeletedfromthereplica,thedeletioneventdoes
notreplicateintotherestoreddomaincontroller.ThisiswhyBackupdoesnotallowyou
torestoredatafromabackupthatisolderthanthetombstonelifetime.
Moredetailsabouttombstoninghttp://www.systemadminguide.in/2013/11/active
directorytombstone.html
IwanttolookattheRIDallocationtableforaDC.WhatdoIdo?
6.
Dcdiag.exe/TEST:RidManager/v|find/i"AvailableRIDPoolfortheDomain"
CanyouconnectActiveDirectorytoother3rdpartyDirectoryServices?Namea
fewoptions.
MicrosoftIdentityIntegrationServer(MIIS)
ForefrontIdentityManager(FIM)