PnP's questions

We have 4 sites - two of which host DFS servers.

Site A - DFS Server #1 (namespace member, replication group)
Site B - DFS Server #2 (namespace member, replication group)
Site C - No servers, just PCs.
Site D - No servers, just PCs. 

By default, clients who access the namespace are referred to the DFS server in their local site. i.e. a PC in Site A will get DFS Server #1 as their referral.

However, a client PC in Site C has no local DFS server.

From a networking perspective, it is cheaper to go to Site A to access the data. But there are no DCs, no servers, therefore no site links, thus no costs. How does DFS work out site costs.

How can I force it to use Site A instead of Site B. Do I need to create AD site links from Site C to Site A with a cheaper cost than Site C to Site B (even though there are no DCs?)

We have 4 ESX hosts in a cluster managed by vcenter (5.5). We have the Dell Open Manage integration suite which adds 100's of additional alarm/alerts to vcenter.

We want to setup email alerts for practically all of these - as they essentially will tell us everything that is going on with the hardware under the hypervisor.

But it seems you can only enable the alarms one by one? This seems insane, I'll be there for days going through and configuring them all, is there no way you can add the alert to all via script or such?

We currently have a Lync 2010 deployment, and are migrating to Skype for Business 2015.

From my reading, there is no way you can upgrade the clients direct from Lync 2010 to Skype for Business 2015/2016, and have to upgrade to Lync 2013 first, then apply the windows updates to update to S4B.

Looking for anyone who has some experience in this process, and essentially the best way to handle this transition.

We have a ~24TB Datastore (a single LUN mapped via a DAS) which has a VMFS5 Datastore.

My understanding was with ESX 5.5 and VMFS5 you can have file sizes up to 62TB (as per this article: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2058287) .

However, the properties of the datastore show the following:

Is there a configuration I am missing, is something wrong here?

I'm going to be honest here - this question has been ripped straight from a exam example, but I'm intrigued to see how such a layout would be configured in the real world (I'm not entirely sure of the rules with regards to such a question?)

Each office contains an identical number of staff. As per the question there is no defined "Head Office" per say.

The options for the answers are as follows:

1. Three Site and Three Site Links
2. Five sites and one site link
3. Five sites and five site links
4. Five sites and three site links

I can see reasoning for two of the options there:

1). Five Sites and Five site links - i.e. Hub and Spoke to perhaps Atlanta.

2). Five Sites and Thee site links - i.e. one site link for all sites connected via the 5Mbps WAN Link, and individual links for the other sites with slower links.

We have a selection of top level folders:

E:\Data1
E:\Data2
E:\Data3

The permissions are simple - the default CREATOR OWNER, SYSTEM Full Control, some security groups allowing Modify and the LOCAL SERVER\Administrator group Full Control. There are no DENY, only ALLOW permissions.

I have a user account that is a member of the local Administrator group mentioned above. However, when I access the folder, the UAC prompt appears and says it needs to add permissions before I can access the folder. An explicit entry is added for this user account and now I can access the folder.

But why? I am a member of a group that has full control, why is it prompting? The folder is set not to inherit permissions from the parent folder so there aren't any weird permissions inheriting from parents folder.

Let's say we have a 4-port switch that is VLAN capable.

1     2     3     4       

Port 1 is TAGGED to VLAN10` and `UNTAGGED to Default_VLAN(1)

Port 2 is UNTAGGED to VLAN10

Port 3 is UNTAGGED to VLAN10

For the sake of this question, we have a packet coming into Port 1 which is tagged with VID 10. Port 1 preserves the tag.

It just so happens the device it needs to send the packet to is connected to Port 2. Does the switch remove the VLAN 10 tag from the packet as it is sending the packet out of a port UNTAGGED to that VID?

Furthermore, let's say this was a ICMP packet, and the device on Port 2 sends the reply, which goes to Port 2 untagged, and becomes part of VLAN 10. Does it get TAGGED with VID 10 when it leaves Port 1 to its destination device because Port1 is TAGGED to that VID? (Let's also make a large assumption for the sake of the question the switch is doing the layer 3 IP routing).

We have multiple geographically separate sites which each have their own ADDS site as expected. Each site is going to have it's own Terminal Server and I would like each site to have it's own RDS Licensing Server. However:

• We only have one set of CALs that were bought to cover all users across all sites (stupid perhaps!).

So, my question is:

• Can you split those CALs amongst multiple licensing servers - i.e. 120 CALs, 6 sites and 6 licensing servers, one in each site. Each Licensing server having 20 CALs each?

If not,

• We would need to have one licensing server which would serve all the Terminal Servers in every site (it is one domain). However, if Site-to-Site VPNs went down, how would terminal servers service users if it was unable to speak to the central licensing server?

We've inherited a customer who after auditing their site turns out they used to have a site-to-site VPN and another DC at the endpoint (which was the only GC in the forest). THe previous IT company demoted this, cleaned up AD, but never made their now main DC a GC.

We want to replace their current DC (2003) with a 2008R2 box, is it best to make the current DC a GC first then dcpromo the new DC, or does it not matter? Bare in mind the new DC will be made a GC.

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual roaming profile folders i.e. username.v2 are SYSTEM (full control) and the actual user (Full control) - I had to take ownership as an admin to actually see these permissions. Basically as per:

http://technet.microsoft.com/en-us/library/cc737633(WS.10).aspx

How can I migrate these across as I have no permissions over them as administrator, can I just do a straight robocopy and then re-point the Profile location attribute in AD to the new location? (obviously configuring share permissions on folder on new server)

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. See for example:

In the GPO - it specifies the location for My Documents redirection to:

\\%HOMESHARE%%HOMEPATH

Now if I type this into a run prompt manually it of course resolves to:

\\\\server01\user\john

The Home Folder connect drive specified for John in AD is mapped to U:\ and in the field:

\\server01\user\john

Yet folder redirection is working, how is this possible? To clarify, this is a Windows 2003 server environment with Win7 and Win XP clients (redirection works on both clients)

I have a single SQL Instance, let's say MSSQLSRV - is the collation per Instance, i.e. every database in the given instance has the same collation, or are collations set per database? i.e. multiple collations per instance.

Is the sole reason of the Group Policy Creator Owner group just to dish out permissions to other users to create (and then modify only their own) GPOs in the domain?

Is there another way to do this via Powershell, or is this group the only way? i.e. just dish out the permissions without being a member of the said group.

There is a PS cmdlet such like: Set-GPPermission for example etc. Although according to their technet on the article it doesn't really apply.

I would like to check my understanding. This is a fully hypothetical scenario below as I am currently studying for a certification.

I have an IIS App Pool with a basic website, which accesses data from a SQL Backend. I want to setup Kerberos Authentication and therefore Delegation.

The identity of the AppPool running the site is IISApp01 and has an SPN set to HTTP/IISSRV01.serverfault.local.

Now, that's all good and well, but where in Active Directory do I set the Delegation options, on the computer object hosting the IIS App Pool or the user account IISApp01 which is the identity of the AppPool. Who will actually delegate the credentials to my SQL Box? So - for how would I add the services to the constrained list of services I am allowing delegation to?

Thanks!

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer.

My current understanding is as follows:

Lets say we have 5 GPO's - GPO1 through GP05. I will use an exam question to put into context.

GPO    Linked to   Enforced
GP01 - contoso.com - No
GP02 - contoso.com - Yes
GP03 -    Site 1   - Yes
GP04 -     OU1     - No
GP05 -     OU1     - Yes

Now my understanding would mean they would apply in this order, from the first to apply to the last to apply (thus the one with most precedence).

GP01 -> GP04 -> GP05 -> GP02 -> GP03 (meaning 3 has the final say on any duplicates)

Am I correct in my understanding? Many thanks!

If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that Computer?

I'm very new to Exchange (in fact, an apprentice and studying it at the moment) and am wondering how the [email protected] address works. An example:

A smarthost configured with one mailbox, [email protected], with an *@serverfault.com alias so, my understanding, all mail sent to *@serverfault.com is SMTP forwarded onto the [email protected] address.

But what happens now? Does Exchange have a master mailbox Postmaster, that receives all this mail and just dishes it out to the correct mailbox? Or is what I just wrote a pile of garbage!

So I'm a little confused. On the Smart Host - there is SMTP forwarding to forward all SMTP to IP Address x.x.x.x which is active for a mailbox on the smarthost called [email protected] with an alias of *@domain.co.uk? How is this working exactly?

Thanks!

So one of our clients users renamed their machine while it was domain joined. I thought maybe AD was intelligent enough to update (I'm fairly new to AD, an apprentice in fact!) but all that's happened is the following:

The old computer name no longer exists in AD. The new computer has joined the domain and can login to domain accounts, access resources etc. and has updated in DNS so I can ping it via it's new PC name.

But it is no where to be seen in Active Directory, or the SBS Control Panel (SBS 2011) which is posing a problem since I need to configure Remote Work Webplace for a use to have access to their machine which is done through the SBS console, but I can't point it to the new renamed computer!

Any ideas?

Thanks!

This probably is a very open ended question, but really I'm only looking for a specific aspect I suppose. It relates to a reboot question I posted earlier, relating to restart orders of servers, Server Restarts and Respective Orders. Please take a look if you get a second for input!

Basically - in relation to how Exchange integrates with AD, what would happen in two scenarios:

1). The Exchange server is booted up before the DC is online 2). You replace a DC but keep your current Exchange server.

I'm fairly new to all of this, so hopefully this isn't a silly question (I'm an apprentice in fact!).

Many thanks

I realise there are multiple ways in which you can backup GPO's - via Powershell, via Group Policy Mgmt and so forth, but how in Windows are you able to backup not only the GPO's themselves, but their links to their respective OU's too? Is this achievable with these tools or would it require something like a System State backup to work?

Cheers!