Active Directory, group policy, and core Windows Server administration roles, distinct from the CompTIA Server+ hardware deck.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What is Active Directory?
- A directory service and identity management system for Windows networks that stores objects like users, computers, and groups in a hierarchical structure.
- What is an Active Directory domain?
- A logical grouping of network objects (users, computers, resources) that share a common directory database and security policy.
- What is an Active Directory forest?
- One or more domains that share a common schema, global catalog, and trust relationships, forming the largest logical grouping in AD.
- What is an organizational unit (OU)?
- A container within a domain used to organize users, computers, and other objects, and to apply Group Policy Objects.
- What is a domain controller?
- A Windows Server that runs Active Directory Domain Services and stores a copy of the domain directory database, handling authentication.
- What is the Global Catalog?
- A read-only partial copy of every object in the forest, maintained by certain domain controllers to enable forest-wide searches.
- What is AD replication?
- The automatic process of copying directory changes from one domain controller to others to maintain consistency across the domain.
- What are Active Directory schema?
- The definition of all object classes and attributes that can exist in an Active Directory forest, shared by all domains.
- What is an AD trust?
- A relationship between two domains or forests that allows users in one domain to be authenticated and authorized to access resources in another.
- What are the two main types of AD trusts?
- Transitive trusts (automatically extended to other domains in a forest) and non-transitive trusts (only apply to the two specific domains).
- What is an AD site?
- A logical grouping of well-connected domain controllers and subnets, used to control replication traffic and optimize authentication.
- What are FSMO roles?
- Flexible Single Master Operation roles; five operational master roles held by specific domain controllers to manage schema updates, domain naming, RID allocation, and PDC emulation.
- What is a Group Policy Object (GPO)?
- A collection of Group Policy settings that defines configurations and restrictions for users and computers within a domain.
- What is the difference between local and domain Group Policy?
- Local GPO applies only to individual computers; domain GPO is centrally managed and applies to users and computers across the domain.
- What is the difference between user and computer GPO settings?
- User GPO settings apply to user accounts regardless of which computer they log into; computer GPO settings apply to the computer itself.