Complete each statement.
1. A(n) __________ object is one that can have other objects subordinate to it.
2. Every object consists of __________ that store information about the object.
3. __________ Policy is one of the most powerful administrative features of Active Directory.
4. The primary difference between global and universal groups is that universal groups add more data
to the global catalog, thereby increasing the amount of __________ traffic between sites.
5. When beginning a new Active Directory installation, the first step is to create a new __________.
6. Every Active Directory domain should have a minimum of __________ domain controllers.
7. To stay synchronized, domain controllers communicate by sending database information to each
other, which is a process called __________.
8. The overall objective in your Active Directory design process should be to create as few
__________ as possible.
9. If you plan to create domains corresponding to remote sites or organizational divisions, the most
common practice is to make them all __________ in the same tree, with a single root domain at the
10. Each domain in an Active Directory installation is a separate __________ entity.
11. The required and recommended attributes that each type of object can have, the type of information
that can be stored in each attribute, and the object’s place in the directory tree are all defined in what
12. What container object functions in a subordinate capacity to a domain but without the complete
separation of security policies?
13. When you create your first domain on an Active Directory network, you are creating the root of
14. What is the name of the list in each forest that contains the objects in the forest along with a subset
of each object’s attributes?
15. What is the name of the process used by Windows NT domains in which one primary domain
controller (PDC) sends its data to one or more backup domain controllers (BDCs)?
16. What does Active Directory use, in which it is possible to make changes to domain objects on any
domain controller, to replicate those changes to all other domain controllers?
17. Each domain in a tree is a separate security entity. What does each domain’s separate Group Policy
18. What component automatically creates replication links between domain controllers in the same site
and schedules their replication activities?
19. When a user logs on to an Active Directory domain, what is involved in the elaborate authentication
procedure that the client computer performs?
20. By definition, how do domains function in Active Directory?
21. What does AGULP stand for?
22. The process of designing an Active Directory infrastructure consists of which basic phases?
23. What is an organizational unit?
24. What are the two most common structural paradigms used in Active Directory designs?
25. The Schema Administrators group exists only in the forest root domain. What do the members of
that group have the ability to do?
HW1 Answer Section
11. directory schema
12. organizational unit
13. domain tree
14. global catalog
15. single-master replication
16. multiple-master replication
17. permissions and user accounts
18. Knowledge Consistency Checker, KCC
19. locating the nearest domain controller and exchanging a series of messages using
20. Domains function as the boundaries for virtually all directory functions including
administration, access control, database management, and replication.
21. Accounts, Global Groups, Universal Groups, Domain Local Groups, and Permissions
22. designing the domain namespace, designing the internal domain structure, designing a site
topology, and designing a Group Policy strategy
23. An organizational unit (OU) is a container object that functions in a subordinate capacity to a
domain. OUs can contain other OUs, as well as leaf objects. You can apply separate Group
Policy to an OU and delegate the administration of an OU as needed.
24. The two most common structural paradigms are the geographic, in which the domain
structure is representative of the organization’s physical locations, and the political, in which
the structure conforms to the divisions or departments within the organization.
25. modify the Active Directory schema