Representing The Creation Of Application Directory Partitions

By Author: Jasmine
Total Articles: 286
Comment this article

There are two things that happen when creating an Microsoft exam 70-291 application directory partition:
Creation of the cross-reference object
Creation of the application directory partition root node
Normally only members of the Enterprise Admins group can create an application directory partition. However, it is possible for a member of the Enterprise Admins group to prepare a cross-reference object for the application directory partition and to delegate the rest of the process to someone with more limited permissions.
The cross-reference object for an application directory partition holds several valuable pieces of information, including the domain controllers that are to have a replica of this partition and the security descriptor reference domain. The partition root node is the Active Directory object at the root of the partition.
The Enterprise Admin can create the cross-reference object then delegate to a person or group with less permissions the right to create the application directory partition root node. Both creation of the cross-reference object ...
... and the application directory partition root node can be accomplished using Ntdsutil.
After using Ntdsutil to create the cross-reference object, the enterprise administrator must modify the cross-reference object's access control list to allow the delegated administrator to modify this free 70-291 test questions cross-reference. This will allow the delegated administrator to create the application directory partition and modify the list of domain controllers that holds replicas of this application directory partition. The delegated administrator must use the names of the application directory partition and the domain controller name that were specified during the precreation process.
To prepare a cross-reference object:
1.Type the appropriate commands to invoke the Ntdsutil domain management command.
2.At the domain management command prompt, type:
precreate ObjectName DomainController, where ObjectName is the distinguished name of the object you want to create, and DomainController is the DNS name of the domain controller on which the object will reside.
If you must demote a domain controller, you must remove the domain controller from the replica set of the application directory partition or delete the application directory partition before you can demote the domain controller.
For testing and troubleshooting purposes, members of the Free Security+ practice exams Enterprise Admins group can manually create or manage application directory partitions using the
Ntdsutil command-line tool.