Note: This questions is part of series of questions that use the same or similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains one Active Directory forest named contoso.com.
The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.
For the contoso.com domain, a company policy states that administrators must be able to retrieve
a list of all the users who have not logged on to the network in the last seven days from any
domain controller.
You need to ensure that the users’ last logon information from the last seven days is replicated to
all of the domain controllers.
What should you use?
A.
Set-ADSite
B.
Set-ADReplicationSite
C.
Set-ADDomain
D.
Set-ADReplicationSiteLink
E.
Set-ADGroup
F.
Set-ADForest
G.
Netdom
Explanation:
https://technet.microsoft.com/en-us/library/ee617212.aspx
Default value for msDS-LogonTimeSyncInterval is 14 days. It means that if LastLogonTimeStamp attribute is older than 14 days then it represents accurate value for LastLogon attribute on any DC. In this question we need to set msDS-LogonTimeSyncInterval smaller than 7 days, for example 6 to be sure that we can filter users who hasn’t logged on for 7 days. Cmdlet Set-AdDomain should be run in every domain in the forest.
https://technet.microsoft.com/en-us/library/ee617212.aspx
http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx
1
0
True!
Using the below command will set the last logon replication :
set-ADDomain -LastLogonReplicationInterval (In days)
https://technet.microsoft.com/en-us/library/ee617212.aspx
1
0