Interview Questions for Sys Admin/ Net Admin 105 Interview Questions for System Administrator / Network Administrator

General Questions Q. Please describe the technical environment of your current (or most recent) po sition. A. When describing the technical environment that you currently support, be sure to include the number of users you support, the number of IT staff, the technic al infrastructure including servers, types of connections, desktop operating sys tems, your job duties, and your work schedule. You should be prepared to talk about each of the positions you have listed on yo ur résumé in this way. Also be prepared with a follow-up statement of your most sign ificant accomplishment.

Q. How do you keep your technical knowledge and skills current? A. Keeping your skills current demonstrates initiative and a desire to perform a t high standards. Be prepared with a list of resources including professional gr oups.

Q. Please describe your greatest technical challenge and how you overcame it. A. Ah, an opportunity for a story. Great examples to draw on: how you taught you rself a new operating system, the installation of a complex system, integration of multiple systems, building of an e-commerce web site. Q. What are some of the tools you use to make your job easier? A. All network administrators have a bag of tricks. You should share some of you r trade secrets as a way of demonstrating that you can be efficient in your job as a network administrator. These can include ghosting tools, troubleshooting to ols, and documentation tools. Q. How do you document your network? A. One of the toughest parts of network administration is keeping track of an al ways changing environment. You must have basic documentation for user administra tion, file system planning, and address planning. Share your documentation with your interviewer.

Planning Questions The interviewer will be interested in your network planning methodologies. The f ollowing questions provide insight into these skills.

Interview Questions and answers: 1. Secure services in your network require reverse name resolution to make it m

Replication between domain controllers takes up a significant amount of bandwidt h. 10. Which of the following conditions should be satisfied to configure dynamic D NS updates for legacy clients? The zone to be used for dynamic updates must be configured to allow dynamic upda tes. you have to configure a reverse lookup zone and proceed to add records. Which further actions are likely to be taken after this reply? After receiving the authoritative reply. the resolution process is effectively o ver. three of which are also used as DN S servers.ore difficult to launch successful attacks against in the services. which is used in zone transfer. The DHCP server must support. after the installation of the domain controller. you are unable to locate infrastructure SRV records anywhere in the zone. 11. used by the default in all resource records in the zone. SOA records contain the current serial number of t he zone. what is the first step in the client takes to resolve the FQDN name into an IP addres s? Performs a recursive search through the primary DNS server based on the network interface configuration 5. you installed a DNS server and created a zone. At some point during the name resolution process. dynamic updates f or legacy clients. And what is the most likely c ause of this failure? The zone you created was not configured to allow dynamic updates. Ho wever. By default. and it is criti cal to keep this zone up-to-date. 4. You are administering a network connected to the Internet. 6. What is the main purpose of SRV records? SRV records are used in locating the hosts that provide certain network services . Whic h record types do you need to create? To configure a reverse lookup zone and proceed to add records PTR Records should be created 2. Before installing your first domain controller in the network.. 9. You have one companywide AD-integrated zone. Your company uses ten domain controllers. which contains several t housand resource records. What are they used for? SOA records contain a TTL value. Preliminary research of the problem indicates that it takes a considerable amount of time to resolve names of resources on the Inte rnet. Local client computers are not caching rep lies The cache. SOA records must be included in every zone. What is the main purpose of a DNS server? DNS servers are used to resolve FQDN hostnames into IP addresses and vice versa 3. What s hould you do? Change the replication scope to all DNS servers in the domain. The local inte rface on the DNS server was not configured to allow any dynamic updates. and be configured to allow. if the name is not found in the cache or local hosts file. 8. What is the use of IGMP protocol? Internet Group Management Protocol: It allows internet hosts to participate in m ulti casting. You are looking to cut bandwidth usage for the purpose of replication. Your users compl ain that everything is slow. SOA records contain the e-mail address of the person who is responsi ble for maintaining the zone. naming it as you would name your AD domain. 7. the requesting party recei ved authoritative reply. To set this up. This zone also allows dynamic updates. What is the most likely reason for this? DNS servers are not caching replies. The IGMP messages are used to learn which host is part of which mu .dns file may have been corrupted on the server.

What would a rise in remote queue length generally indicate? This means mail is not being sent to other servers. that it wants to receive messages. 12. Name the process names for the following: System Attendant? MAD. It could also be databases being dismounted or a lack of disk space. Configuration Domain Controller.EXE. and what are the two methods of sending mail over that connector? SMTP Connector: Forward to smart host or use DNS to route to each address 22. 27. What do characteristics like assertiveness and problem solving play role in the career of a system administrator? Analytical thinking and problem solving is crucial to be able to analyze softwar e or hardware malfunction. What experience do you have with hardware components? Installation and replacement are some of the most frequently performed operation s with hardware.EXE. 26. W3SVC. 14. Global Catalog. RPC 135. POP3 110.lti cast groups. They are also necessary to be able to improve or upgr ade systems so they suit company needs. POP3. What would a rise in the Local Delivery queue generally mean? This indicates a performance issue or outage on the local server. What are the required components of Windows Server 2003 for installing Exch ange 2003? The required components are ASP. Reasons could be slowness in consulting AD.EXE. LDAP 389. Support might mean technical troubleshooting or the development a nd explanation of technological strategy with regards to the projectgoals and me ans. Sometimes a system administrator might need to rebuild a hardwa re component. What connector type would you use to connect to the Internet. 25. They decide on solutions. Give an example of systems you have been working with as an administrator? These typically are: Windows and Linux which support either Asset Management or GIS. What are the personal characteristics of a great system administrator? Great system administrators are experts at handling hardware and software. The mechanism also allows the host to inform its local router. 18. support and maintenance. SMTP. LDAP and Glo bal Catalog? SMTP 25. SMTP/POP/IMAP/OWA INETINFO. They are quick with both their hands and their head. What must be done to an AD forest before Exchange can be deployed? The Setup /forestprep has to be made before the exchange can be deployed. learn in formation needed to fix problems. . 20. What is the maximum amount of databases that can be hosted on Exchange 2003 Enterprise? The maximum amount of databases that can be hosted is 20 databases. and things like system upgrades. 21. IMAP4 143. RPC. IMAP4. Global Catalog 3268. whether to report problems. Assertiveness also plays a role because administrators have to make decisions. or instruct employees regarding technical issu es 15. but they kn ow when and how to communicate with others. What Exchange process is responsible for communication with AD? The DSACCESS process is responsible for communication with AD. This can be explained by out ages or performance issues with the network or remote servers 24. Typical duties included engineering. What 3 types of domain controller does Exchange access? Normal Domain Controller. security measur es. Is team-work part of a system administrator s typical day? Administrators are typically called in to offer technical support for teams work ing a project. What are the standard port numbers for SMTP. 13. 19. How would you optimise Exchange 2003 memory usage on a Windows Server 2003 server with more than 1 GB of memory? dd /3Gb switch to boot.NET. 16. NNTP. They can work alone. and research for the purpose of innovation and upgrading. Information Store STORE. 4 SGs x 5 DB s. slowness in handing messages off to local delivery or SMTP delivery. 17.ini 23.

What will you use? Name a few tools How do I know the path that a packet takes to the destination? What does the ping 192.168. and scenarios for each use? How do I work with the Host name cache on a client computer? How do I clear the DNS cache on the DNS server? .1 -l 1000 -n 100 command do? What is DHCP? What are the benefits and drawbacks of using it? Describe the steps taken by the client and DHCP server in order to obtain an IP address.112.0. What are the benefits and scenarios of using Stub zones? What are the benefits and scenarios of using Conditional Forwarding? What are the differences between Windows" zone used for? What are the requirements from DNS to support AD? How do you manually create SRV records in DNS? Name 3 benefits of using AD-integrated zones. Describe the process of working with an external domain name Describe the importance of DNS to AD. where might you find it in Windows network infrastructure? DNS zones describe the differences between the 4 types. What is DHCPINFORM? Describe the integration between DHCP and DNS. What options in DHCP do you regularly use for an MS network? What are User Classes and Vendor Classes in DHCP? How do I configure a client machine to use a specific User Class? What is the BOOTP protocol used for. What ports are used by DHCP and the DHCP clients? Describe the process of installing a DHCP server in an AD infrastructure. Technical Interview Questions Networking: What is an IP address? What is a subnet mask? What is ARP? What is ARP Cache Poisoning? What is the ANDing process? What is a default gateway? What happens if I don't have one? Can a workstation computer be configured to browse the Internet and yet NOT have a default gateway? What is a subnet? What is APIPA? What is an RFC? Name a few if possible (not necessarily the numbers. What are the disadvantages of circular logging? In the event of a corrupt database. DNS record types describe the most important ones.64/27. What are the benefits of using Windows 2003 DNS when using AD-integrated zones? You installed a new AD domain and the new (and first) DC has not registered its SRV records in DNS. What is the DHCPNACK and when do I get one? Name 2 scenarios.0. just the id eas behind them) What is RFC 1918? What is CIDR? You have the following Network ID: 192. What does "Disable Recursion" in DNS mean? What could cause the Forwarders and Root Hints to be grayed out? What is a "Single Label domain name" and what sort of issues can it cause? What is the "in-addr.115. What is the IP range for y our network? You have the following Network ID: 131. data can only be restored to the last backup . You need at least 500 hosts per network. Name a few possible causes.103. Network Load Balancing and Round Robin. How many networks can you create? What subnet mask will you use? You need to view at network traffic. Describe a few methods of finding an MX record for a remote domain on the Intern et.28.0.

hardware. What are router interfaces? What types can they be? In Windows 2003 routing. How would you ensure that your servers are secure? A. Describe the backup/restore policy you use most. What are some of the things you need to take into consideration when planning an upgrade from one network operating system to another? A. Other considerations include: Network documentation Ensuring that your hardware meets the minimum hardware requirements for the new operating system Creating a test network for testing the compatibility of applications. The key here is testing and backups and that s what the interviewer wan ts to hear. What is the difference between tombstoning a WINS record and simply deleting it? Name the NetBIOS names you might expect from a Windows 2003 DC that is registere d in WINS.What is the 224. What packet types do I see? What can you do with NETSH? How do I look at the open ports on my machine? Q. Q. what are the interface filters? What is NAT? What is the real difference between NAT and PAT? How do you configure NAT on Windows 2003? How do you allow inbound traffic for specific hosts on Windows 2003 NAT? What is VPN? What types of VPN does Windows 2000 and beyond work with natively? What is IAS? In what scenarios do we use it? What's the difference between Mixed mode and Native mode in AD when dealing with RRAS? What is the "RAS and IAS" group in AD? What are Conditions and Profile in RRAS Policies? What types or authentication can a Windows 2003 based RRAS work with? How does SSL work? How does IPSec work? How do I deploy IPSec for a large number of computers? What types of authentication can IPSec use? What is PFS (Perfect Forward Secrecy) in IPSec? How do I monitor IPSec? Looking at IPSec-encrypted traffic with a sniffer. Describe the role of the routing table on a host and on a router.24 address used for? What is WINS and when do we use it? Can you have a Microsoft-based network without any WINS server on it? What are t he "considerations" regarding not using WINS? Describe the differences between WINS push and pull replications. What are routing protocols? Why do we need them? Name a few. Security always begins at the physical level it makes little difference that yo u ve provided all the security the operating system and software can provide if so . the interviewer wants to ensure that you do backups! There are different methods. An alternat ive backup strategy is to perform differential backups Monday through Thursday a nd a normal backup on Friday. A. This is the mother of all planning activities because it will affect so many resources. and drivers with the new operating system Gathering all updated drivers and patches/service packs required for upgrade com patibility Identifying workflow issues before converting Separating workstation conversions from server conversions Ensuring you have backups of data and the servers so that you can revert back Network addressing scheme Q. First of all.1.0. but the most common backup strategy used is to perform increm ental backups Monday through Thursday and a normal backup on Friday.

you may have a process that you li ke to follow.meone can walk away with the box or the portable hard drive. Q. SQL. You ll also want to make sure there s enough disk space for driv ers and files that must reside in the system partition. By asking you to describe multiple ways of getting the job done. What methods are available for configuring a WINS server for use by various M icrosoft computers? A. and whether you need a ROM upgrade for your hardware. and file servers . as well as space for a d ump file if anything goes wrong. this program is usually intended f . Q. The first thing you should do is eith er change the password on the administrator account or change the name of the ac count itself. the intervie wer can assess your experience level with the operating system. Q. Q. How do you determine which file system is best for your environment? A.exe program to create a new acco unt with specific group memberships. Q. However. This question tests how well you plan for a variety of different environments . This is a test of your security skills. however. Some of the corr ect answers to this question include the following: You could copy an existing user s account to create a new account. the ri ghts and permissions for the new. describe it to the interviewer. print. or adding printers. The interviewer wants to know whether your typical work habits are to just ju mp in or whether you do some planning. You obviously want to ensure that your ha rdware meets the minimum requirements. You rebooted all the servers. What s the first thing you should do after installing the network operating sys tem? A. If you do. you could use the CSVDE. creating users. The key here is to take into consideration the file format support required fo r backward compatibility with other operating systems like NetWare or older vers ions of Windows NT. Installation Q. This question demonstrates to the interviewer that you are familiar with the various methods for configuring routing using WINS. The interviewer wants to make sure that testing is an integral part of your r outine whenever you install software or make updates to systems. You may also wa nt to review the Event Viewer logs and look for any errors that have been regist ered. You can either configure the WINS server manually or by way of a Dynamic Host Configuration Protocol Server. The next step is to ensure you have the latest service packs for the operating system and applicati ons running on the server. What are some of the ways to create the new user? A. It s a good idea to also examine the administrative interfaces for SQL and t he e-mail server to satisfy yourself that no anomalies have appeared there. You just installed a service pack on the e-mail. that you have all the right drivers for t he new operating system. What s the final step for the evening? A. and now the service pack installation is complet e. whether it s ins talling applications. D epending on how many installations you ve done. copied account will be based purely on its gro up memberships. Configuration Ninety percent of your day is spent configuring network services. A user has left the company and you need to create a new user with the same r ights and permissions. not permissions g ranted strictly to the original account itself. Using Active Directory. What steps do you go through as part of your server installation process? A.

There are typically multiple ways of accomplishing the same task. If i pconfig shows a setting for the default DNS server other than what you want. How many client access licenses mus t we purchase to allow up to 100 simultaneous connections to our web site? A. the interviewer can assess your real knowledge and experience with vario us operating systems. you should load the Windows 9 8 printer drivers on the share point. Q. A user contacts you and reports that their Windows 2000 workstation is having trouble connecting to the Web. This question tests yo ur experience with older technology. because you sometimes need them while troubleshooting. In addition to mapped drives you can use a Universal Naming Conv ention path: \\servername\ sharename. an essential part of network administration. In this case. assigning group permissions or in dividual rights manually. This is a trick question to see if you understand the concept of user license d connections. How large can I make a file allocation table partition using the NT operating system? A. You could create the new account from scratch. W hat must you do to remedy this? A. You run the ipconfig command on the computer and you find that the computer is not referencing the correct primary DNS server. thi s means the computer s IP configuration is incorrect. What could you do to ensure that th e printer is easily accessible to your Windows 98 clients? A. What are some of the alternative ways for mapping a drive letter to a file se rver if you wish to connect to one of the server s shared folders? A. In this case. This question tests your experience by asking for alternate methods of gettin g the job done. Q. The maximum FAT partition size is 4 gigabytes. We are creating a web site on our NT server using Internet Information Server 4. In this case. Using very basic que stions. Anonymous logons on IIS 4. Users are complaining of slow performance when they run server-based applicat ions. The server has the following specifications: > Compaq 1600 > 800 MHz Pentium 3 > 256MB of RAM > 18GB EIDE hard drive > 10/100 NIC > Connected to a Cisco switch The performance monitor shows the following: Memory Pages/Sec: 5 . you would wan t to check the primary DNS setting in the IP configuration of the computer.0 do not require client access licenses . Troubleshooting Q. Is it necessary for an NT client computer to use the server s name in that UNC path? A. We expect users to log on anonymously. This question tests your familiarity with system capabilities and limitations .0. Q. Q. you can also use the server s TCP/IP address. You may have to support older clients on your network. Q.or bulk creation of accounts in your domain. the interviewer can assess your routing troubleshooting skills. You shared a printer from your NT server. the Windows 2000 client computer needs to be reconfigured. Therefore. You can also browse the Network Neighborho od. Q. Thank goodn ess. Using this question.

or notifying. The user logged in to your network via the terminal serve r. What is the most likely cause for the failure of a user to connect to an NT r emote access server? A. the BDCs. An important part of network administration is setting up the server and clie nts so they can find one another. A user is having trouble sharing a folder from their NT Workstation. You determine that the solution to the user s problem requires an edit of a hid den read-only file. Windows NT Networking Questions Windows NT is still the most popular operating system around. What s the likely c ause? A. An administrator can edit these files on the user s computer by connecting to it over the network via the Computer Management console in Windows 2000. In order to share a folder you must be logged on as an administrator. Q. In this case. Q. who is not technical and is scared to death of comp uters. and the domain contr ollers can authenticate to one another. Q. Your desktop clients can then log on to the domain. You should be comf ortable with this environment to be able to respond to the following questions t hat an interviewer may ask you. Using this console. you can access the administrative shares (C$. What is a likely cause? A. and cre ating a simple batch file on the user s computer.Physical Disk % Disk Time: 20 percent Processor % Processor Time: 90 percent What is the best way to improve the system s performance? A. The interviewer is testing your basic knowledge of rights. Q. It s important to unders tand the proper configuration and troubleshooting of the NT RAS. In this case. Q. D$. Why is Windows Internet Name Server needed in a Windows NT domain? A. A remote user in Montana. This question tests your ability for remote troubleshooting. or power user (in a workgroup). calls for help. Supporting remote users may be a big part of your job. WINS is necessary to achieve NetBIOS name reso lution. and so on) that represent the partiti ons on the user s computer. From there. Q. What tools would you use to reso lve this problem? A. you can edit or create any files necessary to repair the problem. the recommendation should be to upgrade the processor. Microsoft recommends you do s o if the CPU utilization averages over 70 to 75 percent. Q. Between those two categories of permissions. t he user must be granted the RAS dial-in permission. server operator (in a domain ). deleting a system file in the winnt\system32 folder. You ve shared a folder and set the share permissions to Everyone = Full Control. This question tests your knowledge of server optimization. The likely cause is that someone has set the NTFS permissions in a more restrictive manner than the share permissions. none of the users can save information in the folder. How can you synchronize a BDC immediately? . What is the normal replication interval between the primary domain controller and the backup domain controller? A. the mo re restrictive of the two always applies to users accessing the folder over the network. However. This is another question that tests your knowledge of permissions. The PDC waits five minutes after a change in the domain database before pulsin g.

When a California user changes their password. Q. When the old PDC gets back online. What should I check next? A. What can I do? A. You can t. Is it possible to create a domain account from an NT member server? A. Some run. If a BDC doesn t recognize a user s password. will they be able to use the new passwo rd immediately. Q. You can re solve this through Server Manager by first demoting it to a backup domain contro ller and then promoting it to a primary domain controller. Users change their passwords in the NT domain every 30 days. it will a utomatically appeal to the PDC to establish its validity. He will be able to log on with locally cached credentials. and its Netlogon service fails. what happens if we bring the old PDC back online? A. choose the Computer menu. You should promote one of your backup domain controllers to become the primar y domain controller. or must they wait for replication to occur to a backup domain co ntroller in California? A. The account will actually be created on the primary domain control ler. Th e domain controller that validates the logon is the one that runs the script. You must upgrade the primary domain controller to Windows 2000 before an y of the backup domain controllers. it is unable to authenticate to the primary doma in controller. In this case. The scripts should be replicated to all of your backup domain controllers. Active Directory . but we have users in our California office. Q. Can the user log on with his domain account? A. Q. Either restore the account from a backup or reinstall the backup domain contr oller from scratch. After the promotion. What about the member servers and workstations? Must I upgrade them in any pa rticular order? A. You must have a firm grasp of replication. I ve created logon scripts for my users on the primary domain controller. One of your users logs on to the domain from his NT Workstation. Someone just dropped a safe on our primary domain controller. however. Q. its Netlogon service will fail. What should we do next? A. Q. When the BDC boots up. he is unable to contact a domain controller when he tries to log on. By using User Manager for Domains. Q. Q. member servers and workstations can be upgraded in any order. No. Yes. Q. Yes. How can I promote one of my member servers to become a backup domain controll er? A. Yes. You must reinstall the entire operating system as a domain controlle r (either a backup or primary domain controller). waiting for a replic ation will not be necessary. Q. Does it matter which of my domain controllers I upgrade to Windows 2000 first ? A. I ve co rrectly mapped them in the properties of my users accounts. some do not .A. Someone deleted the account of one of my backup domain controllers in Server Manager. Due to a net work failure the following day. Our primary doma in controller is in New York. and select Synchronize With Primary Domain Controller. Within the server manager. select the BDC s account. you can create the account from the m ember server.

security and permissions. What rights must your logged-in account have when creating a Windows 2000 for est? A. In this case.1. Q. Q. what group must you be a member o f? A. What rights does a user need in order to create computer accounts in an Activ e Directory domain? A. This scenario can mean network connectivity issues o Naming Master. By default.In order to manage an Active Directory Services environment. authentication. But there is no server that automatically synchroni zes clocks between your separate domains. Q. Is it possible to have entirely separate domain name spaces within the same f orest? A. This question tests your understanding of Active Directory synchronization. you must have a thorough understanding of forest limitations. and permits users to create up to ten a ccounts. C locks do synchronize only within a domain. a user only needs to be recognized as a member of the Authenticat ed Users group to add workstations to a domain. Q.9. and synchronizatio n. Do clocks synchronize automatically between Windows 2000 computers? A. In this instance. This is a trick question. This permission is established i n the Default Domain Controllers policy. Why is Domain Name System (DNS) so important to an Active Directory forest? A. you must be comfort able with planning. To support Active Directory. The following questions may be asked by the interviewer to assess your experi ence with performing these functions. you can have multiple domain name spaces withi n the same forest.2 (dyn amic updates).6 (SRV records) and 8. Wha network administrator will be able to readily troubleshoot for this one. In this case. An experienced problems such as r a failed Domain oot domain. the account must have administrative rights on the Windows 2000 server used to creat e the new forest. DNS is independent of Windows 2000 and so the answe r is no. What rights must your account have when adding a domain to an existing forest ? A. You must be a member of the Group Policy Creator Owners group in your domain to create these objects. which is the domain controller for the forest r Q. The Primary Domain Controller Emulato r handles this task for you. My account has an error message t does this mean? A. Q. To create Group Policy objects in a domain. Q. As a network administrator you must understand name resolution. Q. Is it possible to prevent the application of a Group Policy to a user account . but when I try to create a new domain I get stating that the Domain Naming Master cannot be contacted. you must be a member of the Enterprise Administrators group. You must understand rights and permissions thoroughly. DNS is critic al to your forest because it possesses all of the service (SRV) records. Q. the proper rights. Q. the DNS server must support two BIND (Berk eley Internet Name Domain) version standards: 4. These r ecords indicate the TCP/IP address and port necessary to locate a specific servi ce offered by a server. When it comes to Active Directory. Does the DNS server have to be a Windows 2000 server? A.

Add the DSClient utility to their computers from the Windows 2000 Server CD. One way to acco mplish this task is the following: On the Security tab of the parent object. An organization is running a web site using Internet Information Server 5. Understanding authentication modes is a critical part to troubleshooting and effectively securing resources. In th is situation. cli ck the Advanced button. What do we need to do to transfer the PDC Emulator role to another domain controller? A. Q. they will authenticate as the Anon ymous account. To prevent the application of a Group Policy to a user. the role was automatically transferred when the former PDC Emulato r was demoted. . You must know how to recover from the se mistakes. Everyone has these types of situations. This can be accomplished by rebooting the domain controller using Directory S ervices Restore Mode and running the ntdsutil tool. An exception to this would be seen if the Anonymous account lacke d permissions to a particular resource on the web site. Q. Q. Q. In this case. Q. We demoted our Primary Domain Controller Emulator to become a member server i n our domain. place the domain controllers in different sites. Q. How do I add this capability to their computers? A. which authentication m ethod is used? A. Administering security is a big part of an administrator s job. Is it possible to schedule replication between two domain controllers in Acti ve Directory? A. Then set the schedule on the Site Link object that connects the sites. This question tests how well you understand how the PDC Emulator works. In this case. This question assesses your knowledge of configuration options for domain con trollers within Active Directory.0 o n a Windows 2000 Server. Using the special permissions list. you would deny the Read and Apply Group Policy permissio ns to the user in that organizational unit. When our domain users connect to the site. rebooting a domain controller using Directory Service s Restore Mode and conducting an authoritative restore of the OU from a backup w ill solve the problem. What are some of the ways of propagating permissions set on an Active Directo ry object to lower-level child objects? A. My Windows 98 users cannot search for published objects in our Active Directo ry domain. How can I move the Active Directory database and log files to a different dri ve on the domain controller? A. How can you recover the organizational unit? A. be sure to select App ly onto This object and all child objects. Q. The site allows both Anonymous and Integrated Windows a uthentication. in which case Integrated Windows authentication would be attempted. Another method is to use the Delegation of Control Wizard.within one of our organizational units? A. In this case. An administrator accidentally deleted an entire organizational unit containin g 200 users from our domain.