Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that runs Windows Server 2012 R2.
You create an Active Directory snapshot of DC1 each day.
You need to view the contents of an Active Directory snapshot from two days ago.
What should you do first?
A.
Run the dsamain.exe command.
B.
Stop the Active Directory Domain Services (AD DS) service.
C.
Start the Volume Shadow Copy Service (VSS).
D.
Run the ntdsutil.exe command.
Explanation:
Dsamain.exe exposes Active Directory data that is stored in a snapshot or backup as a
Lightweight Directory Access Protocol (LDAP) server.
Ref: http://technet.microsoft.com/en-us/library/cc772168.aspx
Answer is D. You mount the snapshot using NTDS utility
Gary is correct, the answer is ‘D’, it says First step
no dought
its dsamain.exe … it reveals whats in the snapshot using ldap
http://technet.microsoft.com/en-us/library/cc772168.aspx
yes dsamain.exe is correct
i think ans is D. steps are as follows: ntdsutil, snapshot , list all..
After you create and mount a snapshot, you can run Dsamain.exe to expose the AD DS or AD LDS data in the snapshot (https://technet.microsoft.com/en-us/library/cc753609(v=ws.10).aspx)
ntdsutil first
dsamain after
Answer is D
Looks like D
1. Run Ntdsutil.exe to list the snapshots that are available and then mount the snapshot that you want to view.
2. Run Dsamain.exe to expose the snapshot volume as an LDAP server.
I’ts D.
http://www.aiotestking.com/microsoft/you-need-to-view-the-contents-of-an-active-directory-snapshot-from-two-days-ago-3/
https://technet.microsoft.com/en-us/library/cc753609%28v=ws.10%29.aspx
You need to view the contents of an Active Directory snapshot
The Active Directory Database Mounting Tool, Dsamain.exe, allows an ntds.dit file to be mounted and exposed as an LDAP server, which means you can use such familiar tools as ADSIEdit, LDP.exe, and Active Directory Users and Computers to interact with a mounted database.
Why answer A not correct? please explain
The NTDS.dit file is mounted using ntdsutil.exe.
Answer 100% A
You’re 100% wrong. Idiot.
Why dont you read peoples comments first before you say something stupid and throw off other people?
You cant view the contents of an AD snapshot unless you do ntdsutil first.
THE QUESTION ASKS “WHAT SHOULD YOU DO F-I-R-S-T?”
well, FIRST, we run NTSDUTIL and MOUNT THE SNAPSHOT,
THEN WE USE DSAMAIN TO VIEW THE CONTENTS.
AGAIN, WHAT DO WE DO FIRST?
NTSDUTIL
ANSWER IS D.
THANK YOU.
It’s D. There are multiple snapshots, as the question says they are taken daily, so you need to list them all and pick the right one to mount (from 2 days ago) using ntdsutil.
You can use the following process to use the Active Directory database mounting tool:
1.Although it is not a requirement, you can schedule a task that regularly runs Ntdsutil.exe to take snapshots of the volume that contains the AD DS or AD LDS database.
2.Run Ntdsutil.exe to list the snapshots that are available and then mount the snapshot that you want to view.
3.Run Dsamain.exe to expose the snapshot volume as an LDAP server.
Pay attention to number 2, it addresses multiple snapshots.
A
https://technet.microsoft.com/en-us/library/Cc772168.aspx
you can use ntdsutil to list the snapshots
you CAN, not SHOULD
You have to run NTDSUTIL 1st. Then DSAMAIN 2nd.
Run NTDSUTIL then use the snapshot sub command to list all snap shots. Then the snapshot mount to select a snapshot by Date-Time.
The mounted snapshot will appear on the root of the C:\
Then DSAMain is used to make the database available to a user specified port (60000 or 21115, or 50000, anything you want).
The in AD Users and Computers you will right click on the domain name icon and connect to a server and specify the server name and port: I.E. DC1:60000
After you need to use NTDSUTIL to unmount the ntds.dit specified by again the GUID.
It’s easy don’t stress urself lol…”Wat shud u do 1st!!!”. Run ntdsutil.exe 1st….simple.read the question
I like your comment! 😀 and agree with you anyway
The question is:
You need to view the contents of an Active Directory snapshot from two days ago.
What should you do first?
For me the correct answer is D (NTDSUTIL)
1st – NTDSUTIL for list and mount the snapshot
2nd – DSAMAIN or ADUC for view the contents of the AD snapshot
For people who give the answer A (DSAMAIN).
What path/target do you use to view the content of the snapshot of the AD ?