Category Archives: Active Directory Domain Services

Active Directory Domain Services

Five FSMO Roles in Active Directory

Schema Master FSMO Role The schema master FSMO role holder is the DC responsible for performing updates to the directory schema (that is, the schema naming context or LDAP://cn=schema,cn=configuration,dc=<domain>). This DC is the only one that can process updates to the directory schema. Once the Schema update is complete, it is replicated from the schema… Read More »

Group Policy Interview Questions – Part 2

What is Microsoft AGPM? Microsoft Advanced Group Policy Management (AGPM) extends the capabilities of the Group Policy Management Console (GPMC) to provide comprehensive change control and improved management for Group Policy Objects (GPOs). AGPM is available as part of the Microsoft Desktop Optimization Pack (MDOP) for Software Assurance. What is RSoP?RSoP (Resultant Set of Policy) is a… Read More »

Group Policy Interview Questions – Part 1

What is group policy in active directory? What are Group Policy objects (GPOs)? Group policy is a feature of Microsoft Windows Active Directory that adds additional controls to user and computer accounts. Group policies provide centralized management of User and Computer configuration settings. A Group Policy Object is a collection of settings systems administrators create… Read More »

How to fix time synchronize issue on virtual Domain Controller with a incorrect time source

This article will explain how to fix time sync issue on Hyper-V virtual domain controller. Normally domain controllers in the domain use the PDC as their central time source. However, a Hyper-V virtual DC would normally synchronize time with it’s hyper-v host instead of PDC. This would cause time difference between virtual DC and other… Read More »

Active Directory health check

I am going to list down some key areas which need to be covered in any Active Directory health check: Replication health: A healthy replication is important for any Active Directory infrastructure. All domain controllers in the infrastructure need to be aware of every change to the Active Directory database. There are tools and techniques… Read More »

FSMO Roles in Active Directory

There are five flexible single master operations (FSMO) roles in the Active Directory infrastructure. Each of them will be performing specific Active Directory tasks that other domain controllers in the infrastructure are not permitted to perform. These five FSMO roles are divided into two categories based on their operation boundaries: Forest Level> Schema operations master>… Read More »