You create a new Active Directory domain.
The functional levelof the domainis Windows Server 2008 R2.
The domain contains five domain controllers.
You needto monitor the replication of the group policy template files.
Which toolshould you use?
A.
Dfsrdiag
B.
Fsutil
C.
Ntdsutil
D.
Ntfrsutl
Explanation:
Personal comment:
For lack of a better answer, Dfsrdiag seems to be the answer.
http://www.windowsnetworking.com/articles-tutorials/common/Understanding-Group-Policy-Replication.html
Understanding Group Policy Replication
Group Policy replication is controlled by two different replication mechanisms: FRS and Active Directory
replication. We will take a look at both mthods within this article.
As Group Policy becomes more important for managingdesktops and servers in Active Directory, it makes
sense that the details around Group Policy need to be understood more completely. There are many moving
parts to Group Policy, including client side extensions, ADM/ADMX files, GPC, GPT, and much more. Whena
change occurs to a Group Policy object (GPO), that change only occurs on one domain controller. Thus, the
change to the GPO must be replicated to all of the other domain controllers. This replication affects multiple
replication mechanisms and can cause odd effects ifnot completed properly. This article will discuss the
replication of Group Policy and what you can do to verify that all replication has occurred.
..
Replication of the Group Policy Template
The portion of the GPO that stores the settings into one or more files is the Group Policy Template (GPT). This
portion of the GPO and the related files are storedon domain controllers under the Sysvol. The default path for
these files is c:\Windows\Sysvol\Sysvol\<domainname>\Policies, as shown in Figure 3.
Figure 3: All GPOs store settings in files under the Sysvol on domain controllers.
The Sysvol on domain controllers is used to deliverGroup Policy settings and logon scripts to clientsat logon.
Since Sysvol is used for authentication of users and computers, it must be up to date on all domain controllers.
When any information is changed under the Sysvol onone domain controller, it triggers replication of the Sysvol
to all other domain controllers.
The Sysvol is replicated using the File ReplicationSystem (FRS). FRS does not have a schedule associated
with it. FRS uses state-based replication instead. This means that as soon as there is a change to anyfile
under the Sysvol folder structure, replication is triggered. This creates a very efficient and fast replication model
for the GPT.
As a side note, FRS replication does not adhere to any site boundaries. Thus, replication will converge to all of
the domain controllers within only a few minutes, even to those domain controllers in remote locations.
Note: Windows Server 2008 can use FRS or DFS-R to replicate the contents of the Sysvol.
…
Verifying GPO Replication
The easiest tool to use to verify that both the GPCand GPT have replicated is GPOTool. This tool is free and
very easy to use. It comes with the operating system and can be run from a command prompt. Just type
gpotool <dcname> /verbose from the command prompt, like you see in Figure 7.
Figure 7: GPOTool provides information on the convergence of both parts of the GPO.
The results of running this command will display the GPT and GPC version numbers for each GPO on the
listed domain controller.
If a portion of the GPO has not replicated to the domain controller that you are authenticating to, there is a
chance that the new settings in the GPO will not apply. Thus, if you know a GPO has been changed, yet the
settings are not being delivered, it is a good ideato verify that the GPO has replicated to the domain controller
that you are authenticating too.
http://blogs.technet.com/b/filecab/archive/2009/05/28/dfsrdiag-exe-replicationstate-what-s-dfsr-up-to.aspx
‘Dfsrdiag.exe ReplicationState’: What’s DFSR up to?
..
This command line switch can be executed against servers running Windows Server 2008 R2 only. The output
of this command line switch consists of a list of updates that are currently being serviced by the replication
service on all inbound and outbound replication connections. Since this command line switch provides apoint in
time snapshot of replication activity on a server, it is possible to see whether replication is makingany progress
by comparing the output of this command obtained atdifferent points in time.
..
Monitoring replication on the branch office server
n order to monitor the current replication state ofthe DFS replication service on these servers, the command
‘dfsrdiag.exe ReplicationState’ can be used. The /member (or /mem) option can be used along with the
‘ReplicationState’ command line switch to specify the server against which this command should be run.In this
example, I’ve dumped a few files from the ‘Windows\System32’ directory into the replicated folder.
dfsrdiag ReplicationState /member:CONTOSO-BRANCH
…
Older information:
It’s hard to find some info on this.
Reference:
http://www.examcollection.com/microsoft/Microsoft.Dump4Certs.70-640.v2011-03-21.by.Scrooge.293q.vce.file.
html
[Slightly edited to make it more readable:]
By Cezar ( Apr 04 2011):
With domain functional level 2008 you have available dfs-r sysvol replication. So with DFL2008 you canuse the
DFSRDIAG tool. It is not available with domain functional level 2003.
With domain functional level 2003 you can only use Ntfrsutl.
