Notes Domino Sys Updd

8/11/2019 Notes Domino Sys Updd

1/115

602 Notes Domino 6 SystemAdministration update

Item: 1(Ref:602.4.8.2)

With a Centralized Directory structure in place !usan finds "hich of the follo"in# to $e true%

Co&plete directory infor&ation is &aintained on allser'ers.

Co&plete directory infor&ation is &aintained only on &ailser'ers.

Co&plete directory infor&ation is &aintained only on directoryser'ers.

Co&plete directory ser'ers are &aintained on &ail and directoryser'ers.

ns"er:Co&plete directory infor&ation is &aintained only on directory

ser'ers.

Explanation: central directory structure ne"ly a'aila$le in Do&ino 6 introduces an option to the syste& ad&inistrators for the

confi#uration of their directories. When in place this &odel uses pri&ary directories on directory ser'ers and

Confi#uration Directories on &ail and application ser'ers. he pri&ary directory is a co&plete Do&ino Directory.

Confi#uration Directory &aintains a su$set of docu&ents. Confi#uration Directories do not contain infor&ation a$o

or #roups. o retrie'e this infor&ation loo*ups "ill $e perfor&ed to the directory ser'ers.

his ne" &odel offers the follo"in# ad'anta#es:

+ Confi#uration Directories are s&aller so less space is re,uired replication is faster and the ser'er can $e less p

+ here is no "aitin# for a co&plete replication cycle for a ne" user or #roup infor&ation to $e a'aila$le.

+ !ince ser'ers are arran#ed hierarchically ti#hter controls can $e in place for directory &odifications.

Objective:!er'er !cala$ility and -erfor&ance unin#


2/115

Sub-Objective:i#rate fro& a distri$uted directory to a central directory

References:/. Do&ino d&inistrator 6 elp + search on: 1sin# a central directory architecture in a Do&ino do&ain

2. Do&ino d&inistrator 6 elp + search on: -lannin# a central directory architecture for a do&ain

Item: 2(Ref:602.4./.2)

&y fre,uently &onitors the ser'er console. !he "ould li*e failure &essa#es to $e 'ery apparent "hen she is 'ie"

console. What can she do to &a*e this easier%

here is no &ethod to si&plify 'ie"in# the console. !he "ill ha'e to use the lo# file and filter forfailures.

1sin# console properties she can confi#ure the ser'er to e&ail &essa#es of the se'erity 3failure3 to her &ailfile.

1sin# console properties she can confi#ure the ser'er to display &essa#es of the se'erity 3failure3 in a seleccolor.

1sin# console properties she can confi#ure the ser'er to #i'e an audi$le "arnin# "hen &essa#es of the se'

3failure3 occur.

ns"er:1sin# console properties she can confi#ure the ser'er to display &essa#es of the se'erity 3failure3 in a selectedcolor.

Explanation:n Do&ino 6 ad&inistrators can use console properties to chan#e the properties of the ser'er console and the re&

console. his allo"s the ad&inistrator to set 3failure3 &essa#es to display in red for e5a&ple. n order to correctly

the re,uest of this ,uestion console properties should $e confi#ured to display &essa#es of the se'erity 3failure3

selected color.

While you can also confi#ure the ser'er to e+&ail &essa#es to ad&inistrators you do this throu#h e'ent handlers

"ith console properties. t should also $e noted that "hile there are a nu&$er of ne" features to &a*e &onitorin#

audi$le "arnin#s are not a'aila$le.


3/115

he #raphic $elo" sho"s the Do&ino d&instrator open in the $ac*#round. he !er'er + !tatus ta$ has $een sel

Doin# this &a*es the &enu option 3i'e Console3 a'aila$le. n the #raphic the &enu 3i'e Console3 has $een sele

and the ne5t step "ould $e to clic* 3Console -roperties.3 his "ould $rin# up the !er'er Console properties $o5 "

you could then specify a color for 3failure3 &essa#es.


Sub-Objective:1se 7e" a'a $ased Do&ino Console

References:/. Do&ino d&inistrator 6 elp + search on: Custo&izin# the appearance of the Do&ino ser'er console

Item: 3(Ref:602..6.2)

in# "ould li*e to &a*e pass"ord &ana#e&ent easy for her users. What can she do to ensure that all of her e5is

users only need to re&e&$er one pass"ord "hether they are usin# a 7otes client or a $ro"ser to access Do&ino

9na$le the 39nforce consistent pass"ords3 settin# in the !er'erdocu&ent

!he cannot synchronize the 7otes D pass"ord and the nternet pass"ord after the user has $eenre#istered

Create and use a 1ser !etup -rofile docu&ent "ith the 31pdate nternet -ass"ord When 7otes Client -ass"Chan#es3 settin# ena$led

Create and use a security settin#s policy docu&ent "ith the 31pdate nternet -ass"ord When 7otes Client-ass"ord Chan#es3 settin# ena$led

ns"er:Create and use a security settin#s policy docu&ent "ith the 31pdate nternet -ass"ord When 7otes Client -ass"Chan#es3 settin# ena$led

Explanation:


4/115

7e" in Do&ino 6 security policy settin#s docu&ents allo" an ad&inistrator to define security settin#s for users.

security settin#s docu&ent has $een created for an or#anizational policy docu&ent ne" and e5istin# users "ill in

those settin#s. ne of the a'aila$le security settin#s is 31pdate nternet -ass"ord When 7otes Client -ass"ord

Chan#es.3 his settin# synchronizes the pass"ords.

1ser !etup -rofile docu&ents cannot $e used "hen policies are in place. dditionally 1ser !etup -rofile docu&e

not pro'ide a &eans to synchronize pass"ords. !ynchronizin# pass"ords is a user option rather than a ser'er opit "ould $e inappropriate for the 39nforce consistent pass"ords3 settin# to appear in the !er'er docu&ent. his se

does not in fact e5ist.

he i&a#e $elo" sho"s a portion of a security settin#s policy docu&ent. his docu&ent contains the field 31pdate

nternet -ass"ord When 7otes Client -ass"ord Chan#es.3

Objective:&ple&ent security and replication features

Sub-Objective:ana#e 1ser -ass"ords

References:/. Do&ino d&inistrator 6 elp + search on: Creatin# a security policy settin#s docu&ent

Item: 4(Ref:602../2.;)

n - "hat does the user


5/115

folders

Explanation:

n Do&ino 6 - clients can access other users< &ail files in addition to their o"n. his allo"s users to access p&ail files (&ail+in data$ases for e5a&ple) as "ell as other user &ail files to "hich they ha'e $een #ranted access

e5a&ple an ad&in assistant accessin# a &ana#er


6/115

ns"er:9ditor

Explanation:When trou$leshootin# the C -rocess there are a fe" thin#s to loo* for. a*e certain of the follo"in#:

/) he ad&inistrator has a &ini&u& of 9ditor access to the Do&ino Directory.

2) he ad&inistratoror& for&ula and a ne" -erson for& for editpurposes


7/115

ns"er:95tended

C

Explanation:95tended C (5C) can $e used to further restrict the access #i'en in the data$ase C. 5C can $e i&ple&e

a Do&ino Directory "hose desi#n is $ased on the ne" Do&ino Directory te&plate -1=79!.7>.

1sin# 5C settin#s you can restrict access for a tar#et #roup of users to certain fields on a selected for&. here

need to create ne" desi#n functionality since 5C is desi#ned to allo" d&inistrators to control access to the do

in the Do&ino Directory. ence 5C "ill $e the &ost efficient "ay to restrict users fro& editin# the na&e fields in

-erson docu&ent.

While certainly an ad&inistrator could alter the desi#n of the Directory to ta*e ad'anta#e of hide+"hen for&ulas or

for&ulas these are not the &ost efficient options as they "ould re,uire desi#n chan#es. he e5istin# roles in the D

"ould not allo" you to control access to specific fields "ithin the -erson docu&ent.


Sub-Objective:1nderstand chan#es to 5C

References:/. Do&ino d&inistrator 6 elp + search on: 95tended C

2. Do&ino d&inistrator 6 elp + search on: 95tended C access settin#s

Item: !(Ref:602.2.2.2)

Durin# the setup of users on the ser'er Rolf has used a setup policy settin#s docu&ents to define the default loo*

content of the users< "or*space. When are these settin#s applied%

nly once durin# usersetup

When the user lo#s in to theser'er


8/115

When the user authenticates "ith theser'er

he ne5t ti&e that a user lo#s in to the"or*space

ns"er:nly once durin# usersetup

Explanation:!etup policy settin#s docu&ents are used only once durin# user setup. n order to apply these types of settin#s a

setup an ad&inistrator can use a des*top policy settin#s docu&ent in "hich case the chan#e "ill $e &ade "hen

authenticates "ith the ser'er.

-olicy settin#s docu&ents allo" ad&inistrators to define settin#s for populations of users. hese settin#s are conti

enforced for the user. #reat deal can $e &ana#ed throu#h the use of -olicy docu&ents. -olicy docu&ents can $

created in any one of the follo"in# areas:

Re#istration + his pertains to defaults for user re#istration.

!etup + his is used to define defaults for user


9/115

Which is true if you ha'e or#anizational policies for users and e5plicit policies assi#ned to the& as "ell%

When an e5plicit policy is used the or#anizational policy is

i#nored.

When an or#anizational policy is used the e5plicit policy isi#nored.

95plicit policies are resol'ed first follo"ed $y or#anizationalpolicies.

r#anizational policies "ill $e resol'ed f irst follo"ed $y e5plicitpolicies.

ns"er:r#anizational policies "ill $e resol'ed first follo"ed $y e5plicitpolicies.

Explanation:n ad&inistrator can assi#n or#anizational policies "hich apply settin#s to users "ithin a certain hierarchy. his co

for all users in the or#anization or or#anizational unit. d&inistrators can also assi#n e5plicit policies. hese could

an indi'idual user or to a #roup of users that are not identified $y their certification hierarchy. When $oth policy typ

$een assi#ned or#anizational policies "ill $e resol'ed first follo"ed $y e5plicit policies.

&a#ine that the C9 Co&pany "ould li*e for all e&ployees to chan#e their pass"ord e'ery 60 days. o"e'er

ad&inistrators due to their hi#h le'el of access should chan#e their pass"ord e'ery 0 days. his can $e acco&

$y creatin# an or#anizational policy for all BC9 e&ployees "ith a 60+day pass"ord e5piration and an e5plicit p

that is assi#ned to syste& ad&inistrators at the ti&e of re#istration "ith a 0+day pass"ord e5piration. !ince the e

policy is applied last its settin#s "ill $e in effect.

Objective:&ple&ent ne" otus Do&ino 6 end+user features

Sub-Objective:1nderstand hierarchy of policy docu&ents

References:/. Do&ino d&inistrator 6 elp + search on: -olicy hierarchy and the effecti'e policy


10/115

Item: #(Ref:602..2./)

Which of the follo"in# C77 $e defined "ith a -olicy docu&ent%

ailarchi'in#

!ecuritysettin#s

Replicationschedules

Re#istrationpreferences

ns"er:Replicationschedules

Explanation: #reat deal can $e &ana#ed throu#h the use of -olicy docu&ents $ut a replication schedule cannot. he follo"in'arious -olicy docu&ents that can $e created:




11/115

References:/. Do&ino d&inistrator 6 elp + search on: -olicies

2. Do&ino d&inistrator 6 elp + search on: Creatin# -olicies

Item: 1$(Ref:602./.2./)

?aren "ants &ail &essa#es recei'ed fro& her ana#er to appear in the color #reen in her in$o5 'ie" and she "a

&essa#es fro& the !yste& d&inistrator to appear in the color $lue. Where does ?aren #o to acco&plish this%

ail filepreferences

ail 'ie" in her aildata$ase

Data$ase properties of her aildata$ase

1ser -references on her local"or*station

ns"er:ail filepreferences

Explanation:n the ,uestion scenario ?aren "ants &essa#es fro& her ana#er and !yste&s d&inistrator to appear in her n

'ie" in colors she chooses. ?aren can specify $oth a fore#round and a $ac*#round color for these &essa#es.

n order to acco&plish this she &ust open her ail data$ase. nce she has opened the data$ase she can choosctionsools -referencesail and then the Colors ta$. nce she has chosen the Colors ta$ she can specify t

sender na&es and the color co&$inations she "ishes to use for each.

he re&ainin# ans"ers are incorrect as those &ethods do not allo" for the control of ho" &essa#es appear in th

'ie".

he #raphic $elo" sho"s the ail preferences dialo# $o5 "here the color co&$inations can $e specified for inco&

&ail.


12/115

Objective:&ple&ent ail Calendarin# E !chedulin# and oDo >eatures

Sub-Objective:pply custo&ized color to inco&in# e+&ails ($y sender)

References:/. Do&ino 6 elp + search on: !ettin# colors in the n$o5 to identify specified senders

Item: 11(Ref:602../.)

!a& "ants to &i#rate an e5istin# 7otes certifier to the C process. What does !a& need to do%

1se the i#rate Certifiertool.

1se the odify Certifier tool and then use the i#rate Certifier$utton.

e &ust recreate the certifier as there is no &ethod to &i#rate an nternet

certifier.

1se the D -roperties tool to access the D file then use the i#rate Certifier$utton.

ns"er:1se the i#rate Certifiertool.

Explanation:n order to si&plify the &ana#e&ent of certification re,uests the C process "as introduced in R6. his ser'er tas

&ana#e and process certification re,uests of $oth nternet certifiers and 7otes certifiers. n order to ta*e ad'anta#

ser'er+$ased functionality e5istin# certifiers need to $e &i#rated to the C -rocess $y usin# the i#rate Certifier t

here are a nu&$er of ad'anta#es to usin# the C -rocess:


13/115

/) uto&ates the certification process

2) Can $e done fro& a We$ $ro"ser

) s consistent $et"een nternet certifiers and 7otes certifiers

4) d&inistrators do not need to access the certifier D since the Re#istration uthority is supported

;) llo"s the use of Certificate Re'ocation ists (CRs)

@ou use the i#ration Certifier tool to &i#rate a Certifier to the C process. he first three steps are sho"n $elo":

/. >ro& the Do&ino d&inistrator clic* Confi#uration.

2. n the ools pane choose Certification + i#rate Certifier.

. n the i#rate Certifier dialo# $o5 clic* !elect.

he #raphic $elo" sho"s the ools pane in the Do&ino d&inistrator. >ro& the ools pane Certification has $een

selected and the options for Certification are e5panded. 7otice the option 3i#rate Certifier.3 nce you clic* the

Certifier option you "ill recei'e a i#rate Certifier dialo# $o5 "here you can select the cert.id of the certifier you "

&i#rate.


Sub-Objective:Certify "ith a C *ey

References:/. Do&ino d&inistrator 6 elp + search on: Do&ino ser'er+$ased certification authority

2. Do&ino d&inistrator 6 elp + search on: i#ratin# a certifier to the C process

Item: 12(Ref:602.4.F.)

ndy is e5cited that in otus Do&ino 6 he "ill not ha'e to re$uild 'ie"s after a ser'er crash. What &ust he do to ta

ad'anta#e of this enhance&ent%

7othin#. his ne" feature is inherent in theproduct.

e only needs to fla# the desired 'ie"s for Aie"o##in#.

e &ust i&ple&ent transaction lo##in# alon# "ith fla##in# the desired 'ie"s for Aie"o##in#.


14/115

e only needs to i&ple&ent ransaction o##in#. ll data$ase 'ie"s "ill $e included $ydefault.

ns"er:

e &ust i&ple&ent transaction lo##in# alon# "ith fla##in# the desired 'ie"s for Aie"o##in#.

Explanation:Aie" lo##in# ensures that ser'er crashes "ill not re,uire the ad&inistrator to re$uild 'ie"s. n order to ta*e ad'an

this enhance&ent the ad&inistrator needs to i&ple&ent ransaction o##in# as "ell as fla# the desired 'ie"s for

o##in#. his is done $y chec*in# the 3o##in#3 option 3include updates in transaction lo#3 on the d'anced ta$ o

Aie" -roperties $o5 "ithin the Do&ino Desi#ner. ssi#nin# this settin# in a te&plate "ill allo" you to carry the se

data$ases assi#ned to the te&plate.

he #raphic $elo" sho"s the properties $o5 for a selected 'ie" fro& "ithin Desi#ner. he ad'anced ta$ has alreaselected. he option 3o##in#3 option 3include updates in transaction lo#3 is located at the $otto& of the properties


Sub-Objective:!etup and Confi#ure a 7otesDo&ino Release 6 !er'er

References:/. Do&ino d&inistrator 6 elp + search on: ransaction lo##in#

2. Do&ino d&inistrator 6 elp + search on: Aie" lo##in#

Item: 13(Ref:602././2.2)

@ou ha'e recei'ed a file attach&ent in an e&ail and you "ant to sa'e the attach&ent to your local dis* dri'e. Whatrue state&ent relati'e to a &ethod a'aila$le for sa'in# attach&ents%

@ou can dra# it fro& the 7otes docu&ent to a folder on yourco&puter.

he !a'e option fro& the ttach&ent dialo# $o5 is the only &ethod for sa'in# a file attach&ent to yourco&puter.


15/115

t is necessary to first open the attach&ent into the pro#ra& it "as created fro& and then sa'e it to the desirefolder on your co&puter.

Choose the Aie" option fro& the ttach&ent dialo# $o5 to 'ie" the file and then choose !a'e to sa'e the file

desired folder on your co&puter.

ns"er:@ou can dra# it fro& the 7otes docu&ent to a folder on yourco&puter.

Explanation:he R6 ttach&ent dialo# $o5 no lon#er has the options 3Detach3 and 3aunch3 they ha'e $een replaced $y 3pe

3!a'e.3 he R6 ttach&ent dialo# $o5 options are as follo"s:

Aie":

his option allo"s you to 'ie" the file "ithout the pro#ra& the file "as created fro& if it is a for&at a'aila$le for W

F; Windo"s F8 and Windo"s 7 "ithin 7otes 6. he attach&ent cannot $e sa'ed fro& the Aie" option. >or a fu

of these supported for&ats "ithin 7otes 6 refer to the otus 7otes 6 elp docu&ent: 3penin# sa'in# or deletin#

attach&ents.3

pen:

he pen option "ill open the file in the pro#ra& it "as created fro& if that pro#ra& resides on your co&puter. h

attach&ent can then $e sa'ed fro& "ithin the pro#ra& to the file syste& $ut chan#es "ill not $e sa'ed in the 7ote

docu&ent file attach&ent.

9dit:

his option "ill open the file in the pro#ra& the attach&ent "as created "ith if that application resides on your co&

@ou can then &a*e any editin# chan#es. When you sa'e the file the edits "ill $e reflected in the file attach&ent in

docu&ent. his &eans you "ill not ha'e delete the file attach&ent and reattach the re'ised file.

!a'e:

his option is the replace&ent to the 3Detach3 option in pre'ious releases of 7otes. 1se this option to sa'e your fi

your co&puter


16/115

1tilize dra# and drop to operatin# syste& to re&o'e file attach&ents

References:/. Do&ino 6 elp + search on: penin# sa'in# or deletin# attach&ents

Item: 14(Ref:602../2.)

What is used in the Do&ino Directory 95tended Directory Catalo# and the d&inistration Re,uests data$ase to r

access to specific docu&ents and fields "ithin those data$ases%

Roles

95tended C(5C)

ccess Control ist(C)

95ecution Control ist(9C)

ns"er:95tended C(5C)

Explanation:he 95tended C is a ne" feature in Do&ino 6 that allo"s further refine&ent of a userro& the d'anced ta$

39nforce a consistent ccess Control ist across all replicas3 and then 39na$le 95tended ccess.3 Close the C

$o5 confir&in# and acceptin# all chan#es and open it a#ain. @ou "ill see a ne" $utton on the =asics ta$ 395tend

ccess.3 1se this dialo# $o5 to confi#ure 95tended ccess for the data$ase. @ou cannot use 95tended ccess to

user &ore access than is #i'en in the pri&ary C.

he C refers to each data$ase


17/115

he 95ecution Control ist is the 7otes "or*station security confi#uration that allo"s each user or their ad&inistra

define a co&forta$le le'el of security for the 7otes applications runnin# on their co&puter.

ccess Roles are defined "ithin the C of e'ery data$ase that allo"s the de'eloper to define security "ithin des

ele&ents of the data$ase $y referrin# to roles instead of indi'idual na&es.



References:/. Do&ino d&inistrator 6 elp + search on: 95tended C access settin#s

Item: 15(Ref:602.2./0./)

Which 7otes tas* runs as a $ac*#round tas* and the pro#ress of "hich can $e 'ie"ed usin# the status $ar%

!a'in#attach&ents

Replication of

data$ases

Replacin# the desi#n of adata$ase

ll of thea$o'e

ns"er:ll of thea$o'e

Explanation:


18/115

he status of $ac*#round tas*s in 7otes can $e 'ie"ed usin# the status $ar. Replacin# a desi#n of a data$ase sa

attach&ents and replicatin# data$ases are e5a&ples of $ac*#round tas*s "hose pro#ress you can 'ie" usin# the

$ar.


Sub-Objective:Custo&ize status $ar

References:/. Do&ino 6 elp + search on: !tatus $ar: current state infor&ation

Item: 1(Ref:602.2.F.2)

Which can policies $e applied to%

1sers andC

C 5C and1sers

1sers r#anizations andC

1sers r#anizations and r#anizationalunits

ns"er:1sers r#anizations and r#anizationalunits

Explanation:@ou can create -olicy settin#s docu&ents for a user &ultiple users an r#anization or an r#anizational unit. >o

e5a&ple you &ay "ant to prohi$it &ail archi'in# $y users "ithin an r#anization or r#anizational unit. @ou can d

$y creatin# a -olicy docu&ent.

here are fi'e areas for "hich policy settin#s docu&ents can $e created. hey are listed $elo":


19/115




20/115

Explanation:7or&ally the C process "ill refresh appro5i&ately e'ery /2 hours. n order to force this the ad&inistrator can firs

process all ad&inistration re,uest co&&ands "ith


21/115

Explanation:nce you set up the color co&$inations for your &ail these colors "ill $e displayed for those docu&ents that appe

the ll Docu&ents 'ie" and any folders that you &ay create $ased on the desi#n of the &ail n$o5.


Sub-Objective:pply custo&ized color to inco&in# e+&ails ($y sender)

References:/. Do&ino 6 elp + search on: !ettin# colors in the n$o5 to identify specified senders

Item: 1#(Ref:602../.2)

Where are ssued Certificate ists (Cs) stored%

he do&ain


22/115

/.) copy of each issued certificate

2.) he certificate re'ocation list

.) Certificate uthority Confi#uration docu&ents


Sub-Objective:1se C and CR


Item: 2$(Ref:602.4.F.6)

Which co&&and can $e entered at the ser'er console to start an a#ent for de$u##in# if the a#ent is na&ed 3&aili

is located in a data$ase na&ed sales%

ar sales.nsf


23/115

3Run3 is not a 'alid Do&ino !er'er co&&and. 3r sales.nsf


24/115

he 3llo" re&ote de$u##in#3 option &ust $e ena$led in the !er'er docu&ent to re&otely de$u# otus!cript a#e

run on the Do&ino ser'er. he 3llo" re&ote de$u##in#3 option &ust $e chec*ed in the #ent -roperties dialo# $

each otus!cript a#ent that you "ish to de$u#.

ultiple users can attach to a ser'er a#ent at the sa&e ti&e for de$u##in# purposes. o"e'er only one user reta

control of re&otely de$u##in# the a#ent at a #i'en ti&e.


Sub-Objective:!etup and Confi#ure a 7otesDo&ino Release 6 !er'er

References:/. Do&ino Desi#ner 6 elp + search on: 1sin# the re&ote de$u##er

Item: 22(Ref:602..6.)

What is a possi$le concern $y an d&inistrator "hen i&ple&entin# pass"ord synchronization%

!ecurity ris* due to shared 7otes and nternetpass"ords

d&inistrators "ill need to ha'e physical access to the user


25/115

authenticate usin# a 7otes client. his is not to say that you should not use pass"ord synchronization for users $

issue of security should $e $alanced a#ainst the con'enience of pass"ord synchronization.

!ince the 7otes and nternet pass"ords "ould $e synchronized it "ould $e incorrect that the user &ust re&e&$e

pass"ords. t "ould also $e incorrect that the user "ould ha'e to chan#e $oth pass"ords. When the 7otes pass"

chan#ed the nternet pass"ord is synchronized for the&. >inally it is incorrect that the ad&inistrator "ould need p

access to the 7otes D. he ad&inistrator sets up pass"ord synchronization usin# a security settin#s policy docu&

he con'enience of pass"ord synchronization is that users only need to re&e&$er one pass"ord. he set up of

pass"ord synchronization for users is a relati'ely si&ple process. his can $e done $y settin# the 31pdate nterne

-ass"ord When 7otes Client -ass"ord Chan#es3 to 3@es3 in a security settin#s policy docu&ent. !ecurity policy

docu&ents allo" an ad&inistrator to define security settin#s for users. nce a security settin#s docu&ent has $ee

created for an or#anizational policy docu&ent ne" and e5istin# users "ill inherit those settin#s.

!ecurity settin#s policy docu&ents are created fro& the Do&ino d&inistrator. he #raphic $elo" sho"s a portion

security settin#s policy docu&ent. his docu&ent contains the field 31pdate nternet -ass"ord When 7otes Client

-ass"ord Chan#es.3



References:/. Do&ino d&inistrator 6 elp + search on: Creatin# a security policy settin#s docu&ent

2. 95plorin# 7e" >eatures in = otus Do&ino 6 d&inistration + esson 4: !ecurity !ettin#s in -olicies

Item: 23(Ref:602../.6)

fter you &i#rate or create a certifier "here can you #o to &odify it%

Certificate o#data$ase

Certifier docu&ent in the Do&ino Directoryonly

Certifier docu&ent in the Certifier C data$aseonly


26/115

Certifier docu&ent in the Do&ino Directory and in the Certifier Cdata$ase

ns"er:

Certifier docu&ent in the Do&ino Directory and in the Certifier Cdata$ase

Explanation: certifier can $e &odified in one of t"o places. @ou can &odify it throu#h the certifier C data$ase "hich can $e

accessed fro& the Do&ino d&inistrator or you can &odify it throu#h the certifier docu&ent "hich can also $e ac

fro& the Do&ino d&inistrator. o"e'er it re,uires a C ad&inistrator "ith 9ditor access to the Do&ino Directory

order to $e a$le to &odify the certifier.

he certificate lo# data$ase lo#s all issued certificates. his data$ase does not allo" you to &a*e &odifications to

certificates.


Sub-Objective:Certify "ith a C *ey

References:/. Do&ino d&inistrator 6 elp + search on: odifyin# a ser'er+$ased C

Item: 24(Ref:602./.F./)

@ou ha'e recei'ed an e+&ail that contains an attached otus Word -ro file. Which option in the 7otes 6 'ersion of

ttach&ent dialo# $o5 "ill open the file in the Word -ro pro#ra& if it e5ists on your co&puter%

pen

Aie"

Detach


27/115


28/115

Item: 25(Ref:602.2.I.2)

@ou "ant to &ana#e nternet pass"ord ,uality as "ell as allo" users to chan#e their nternet pass"ords usin# a W

$ro"ser. What do you use to &ana#e the nternet pass"ords that you assi#n to users "ho ha'e -erson docu&en

Do&ino Directory%

-ersondocu&ent

!er'erdocu&ent

Confi#urationdocu&ent

!ecurity settin#s policydocu&ent

ns"er:!ecurity settin#s policydocu&ent

Explanation: security settin#s policy docu&ent can $e used to &ana#e nternet pass"ords that you assi#n to users. hese us

"ould $e those "ho ha'e -erson docu&ents in the Do&ino Directory. @ou can &ana#e the follo"in# relati'e to the

nternet pass"ords:

/) Guality of the pass"ord

2) llo" the users to chan#e their nternet pass"ords throu#h the use of a We$ $ro"ser

) 95piration period can $e controlled alon# "ith the chan#e inter'als

7ote: f you are #oin# to allo" users to chan#e their nternet pass"ords throu#h a $ro"ser it "ill $e necessary to

session authentication ena$led for your ser'er.


Sub-Objective:Create !ecurity -olicies

References:


29/115

/. Do&ino d&inistrator 6 elp + search on: ana#in# nternet pass"ords

Item: 2(Ref:602./.6./)

@ou "ant to for"ard an e+&ail to another person $ut e5clude its attach&ent. Where do you acco&plish this%

>ile&enu

ctions&enu

ttach&ent&enu

ttach&entproperties

ns"er:ctions&enu

Explanation:n 7otes 6 you can choose to for"ard or reply to a &essa#e "ithout the attach&ent. Choose the >or"ard or Reply

fro& the ctions &enu as sho"n in the #raphic $elo". @ou can also use the 3>or"ard3 $utton or the 3Reply3 $utton

reply to or for"ard the &essa#e "ithout its attach&ent..

Objective:

&ple&ent ail Calendarin# E !chedulin# and oDo >eatures

Sub-Objective:>or"ard or Reply to &ail "ithout attach&ents

References:/. Do&ino 6 elp + search on: >or"ardin# a &essa#e or docu&ent


30/115


31/115

-er i&e nter'al + sends one notification for the specified ti&e inter'al (n additional field 39rror nter'al3 "ill app

store the ti&e inter'al.

'er ,uota enforce&ent + his settin# specifies "hat to do "ith &essa#es "hen the recipient has e5ceeded their ,

he choices are:

Deli'er any"ay (don


32/115

Explanation:cti'ity o##in# is ena$led at the ser'er le'el in the Confi#uration !ettin#s docu&ent. cti'ity o##in# is not ena$

default. =y usin# cti'ity o##in# an ad&inistrator can *eep trac* of user sessions data$ase acti'ity &ail acti'ityreplication and &ore. his infor&ation can $e useful for perfor&ance plannin# $illin# and #eneral ser'er and use

trac*in#.


Sub-Objective:!etup and Confi#ure a 7otesDo&ino Release 6 1ser

References:/. Do&ino d&inistrator 6 elp + search on: Confi#urin# acti'ity lo##in#

Item: 2#(Ref:602.2.8./)

>ollo"in# corporate standards att "ants all of his users to "or* in a consistent 7otes en'iron&ent includin# the

des*top security and &ail archi'in# settin#s. What can he do to ensure that all his users &aintain the sa&e settin

Create and use policy settin#s

docu&ents.

Create and use a user setup profiledocu&ent.

aintain docu&entation on corporate standards and periodically as* users toco&ply.

1se replication to push a $oo*&ar*.nsf file "ith the desired settin#s to all of hisusers .

ns"er:Create and use policy settin#sdocu&ents.


33/115


34/115

>ull accessad&inistrators

Restricted syste&ad&inistrators

ns"er:>ull accessad&inistrators

Explanation: nu&$er of ne" !er'er+docu&ent fields related to security are no" a'aila$le in release 6. he users listed in the

3Data$ase ad&inistrators3 "ill ha'e ad&inistrati'e access to data$ases. hese users can also co&pact data$ases

inde5es set data$ase properties and create replicas. his field is located in the d&inistrators section located un!ecurity ta$ of the !er'er docu&ent.

he #raphic $elo" sho"s a screen shot fro& the Do&ino d&inistrator. he ser'er has already $een selected and

security ta$ is acti'e. he field 3Data$ase d&inistrators3 is one of the security options sho"n.


Sub-Objective:!et !ecurity Dialo# properties $o5

References:/. Do&ino d&inistrator 6 elp + search on: Restrictin# ad&inistrator access (see >ull+access ad&inistrators)

Item: 31(Ref:602.4.4.)

fter a &essa#e addressed to 20 recipients has $een deli'ered to .=L $ut $efore it is transferred to the des

ser'er the ad&inistrator adds a ser'er &ail rule that 3does not accept3 &essa#es "here the 3recipient count is #re

than /0.3 -re'iously there "as no rule related to recipient count on this ser'er. What "ill happen to this &essa#e%

he &essa#e "ill i&&ediately $edenied


35/115

he &essa#e "ill $e transferred to the ne5t ser'er and e'aluated a#ainst that ser'er

Sub-Objective:&ple&ent ail Guota Chan#es

References:/. Do&ino d&inistrator 6 elp + search on: !ettin# ser'er &ail rules

Item: 32(Ref:602..;./)

Which is a correct state&ent re#ardin# strea&in# replication%

he client and ser'er do not $oth ha'e to use Do&ino6.


36/115

user can start usin# the first+replicated docu&ents "hile replicationcontinues.

he replicator tas* can send &ultiple chan#es in one co&&and re,uest and replicate lar#er docu&entsfirst.

f the user disconnects "hen the desired docu&ent arri'es the re&ainin# docu&ents "ill not replicate at the replication.

ns"er: user can start usin# the first+replicated docu&ents "hile replicationcontinues.

Explanation:!trea&in# replication is ne" to release 6. t has se'eral efficiency $enefits as listed $elo":

/) !&aller docu&ents are replicated first.

2) user can start usin# the first+replicated docu&ents "hile replication is still in process.

) f the user disconnects after recei'in# a docu&ent he or she needed the re&ainin# docu&ents "ill replicate the

ti&e replication $e#ins.


Sub-Objective:?no" docu&ent replication order

References:/. 95plorin# 7e" >eatures in = otus Do&ino 6 d&inistration + ppendi5 C: dditional 7otesDo&ino 6 d&in

>eatures

Item: 33(Ref:602.4.4.//)

Which is a true state&ent re#ardin# the ,uota enforce&ent of a &ail file%

When calculatin# &ail file size Do&ino ta*es into account the space ta*en $y a full+te5tinde5.


37/115

f a &ail file uses shared &ail this "ill $e used $y Do&ino in calculatin# the &ail f ile size a#ainst the &ail file,uota

3White space3 "ill $e counted a#ainst the &ail file ,uota if the Guota enforce&ent field 3Chec* space used in"hen addin# a note3 is selected.

f the Guota enforce&ent field 3Chec* filesize "hen e5tendin# the file3 is selected then the calculated physicaof the &ail file "ill not include the unused 3"hite space.3

ns"er:f a &ail file uses shared &ail this "ill $e used $y Do&ino in calculatin# the &ail file size a#ainst the &ail file,uota

Explanation:When co&parin# the size of a &ail file to a &ail ,uota Do&ino ta*es shared &ail into consideration. he co&plete

the &ail &essa#e is added to the user


38/115

Which type of a#ent can $e re&otely de$u##ed%

a'a

a'a!cript

otus!cript

>or&ula

lan#ua#e

ns"er:otus!cript

Explanation:

nly otus!cript a#ents can $e de$u##ed re&otely. o"e'er you can also &onitor the e5ecution of a'a a#ents re&ote de$u##er. a'a!cript and a#ents "ritten in the >or&ula lan#ua#e cannot $e de$u##ed re&otely.

o ena$le an a#ent to $e de$u##ed re&otely the Re&ote De$u# ser'er tas* &ust $e started on the Do&ino ser'e

the a#ent property 3llo" re&ote de$u##in#3 &ust $e ena$led in the a#ent properties !ecurity ta$. his settin# is

a'aila$le in the a#ent properties !ecurity ta$. n order to de$u# the a#ent the re&ote de$u##er &ust $e runnin# o

ser'er. Chec* the ser'er tas*s at the ser'er console and if it is not started it can $e started "ith the ser'er console

co&&and


39/115

Item: 35(Ref:602.4.2./)

@ou "ant to &onitor ser'er perfor&ance calculate $lended ser'er statistics for *ey ser'er co&ponents and co&p

the& a#ainst threshold le'els. Which "ill help #uide you "ith $oth short+ter& and lon#+ter& reco&&endations for

i&pro'in# ser'er perfor&ance%

9'entandlers

9'entKenerators

!er'er ealthonitorin#

!tatistics &onitorin# andanalysis

ns"er:!er'er ealthonitorin#

Explanation:7e" to Do&ino 6 the !er'er ealth onitor reports on a ser'er


40/115


41/115

"ithin the Do&ino d&inistrator or fro& the co&puter


42/115

Explanation:7otesDo&ino 6 introduces a nu&$er of ne" !er'er+docu&ent fields related to security. n the !ecurity ta$ of the

docu&ent you "ill find the follo"in# fields in the d&inistrators section:

>ull access ad&inistrators + 7a&es listed in this field "ill ha'e the hi#hest le'el of ad&inistrati'e access to the ser

hese users "ill $e a$le to perfor& all ad&inistrati'e tas*s.

d&inistrators + 7a&es listed in this field "ill ha'e the sa&e pri'ile#es as the Data$ase d&inistrator and >ull Re

Console d&inistrators. dditionally these users can use the "e$ ad&in tool &ana#e &essa#e trac*in# and use

console to re&otely ad&inister 17L ser'ers.

Data$ase ad&inistrators + 7a&es listed in this field "ill ha'e ad&inistrati'e access to data$ases. &on# other tas

these users can co&pact data$ases create inde5es set data$ase properties and create replicas. his settin# "ill

you to set data$ase ,uotas.

>ull re&ote console ad&inistrators + 7a&es listed in this field "ill $e a$le to ta*e ad'anta#e of the re&ote ser'er c

Aie"+only ad&inistrators + 7a&es listed in this field "ill $e a$le to use the re&ote ser'er console to issue only thos

co&&ands that sho" syste& status. hese co&&ands $e#in "ith


43/115

Item: 3"(Ref:602.4.8.4)

!asha "ants to i&pro'e the transfer speed of &ail &essa#es $et"een ser'ers "ithin &ultiple do&ains of her co&

What "ill &ost increase the speed no &atter "hat for&at is used to address the &essa#e%

Directoryssistance

o$ile DirectoryCatalo#

95tended DirectoryCatalo#

Condensed DirectoryCatalo#

ns"er:95tended DirectoryCatalo#

Explanation:ll of the possi$le ans"ers offer &ethods to aid in the loo*up of na&es.

7e" to Do&ino 6 the 95tended Directory Catalo# contains all of the usual Do&ino Directory 'ie"s. his &eans th

&atter "hat for&at used to address the &essa#e the loo*up "ill $e ,uic*.

Directory ssistance allo"s an ad&inistrator to point to additional directories. his "ould help in locatin# na&es $e

&ultiple do&ains. o"e'er this loo*up could $e ti&e consu&in# since the loo*ups are perfor&ed to different ser'

Directory Catalo#s $rin# the infor&ation fro& &ultiple do&ains to#ether into one data$ase. here is no need to do

loo*ups to different ser'ers so a Directory Catalo# "ill $e faster than Directory ssistance. o$ile Directory Catal

stored locally on the user


44/115

!er'er !cala$ility and -erfor&ance unin#


References:/. Do&ino d&inistrator 6 elp + search on: 95tended Directory catalo#s

Item: 3#(Ref:602./.I./)

Where do you ena$le desi#n loc*in# so that you can e5plicitly loc* a desi#n ele&ent such as a 'ie" to ensure th

desi#ners cannot &odify the desi#n ele&ent that you are "or*in# on%

Aie"properties

Desi#nproperties

Data$aseproperties

Resource

properties

ns"er:Data$aseproperties

Explanation:

desi#n ele&ent is te&porarily loc*ed "hen $ein# edited. When the desi#ner has co&pleted editin# the desi#n ethe te&porary loc* is released. o"e'er you &ay "ant to &a*e certain that no other desi#ner in your desi#n #rou

&odify desi#n ele&ents that you are personally "or*in# on. n this case you "ould "ant to e5plicitly loc* those de

ele&ents. nce you ha'e co&pleted your &odifications you can unloc* the desi#n ele&ents so others can &odify

needed.

he first step in loc*in# a desi#n ele&ent is to ena$le desi#n ele&ent loc*in# in the data$ase properties. Do this $

clic*in# the Desi#n ta$ and selectin# 3llo" desi#n loc*in#.3 nce you ha'e done this you &ay proceed to Desi#n

hi#hli#ht the desi#n ele&ent(s) fro& the Wor* pane ri#ht+clic* the desi#n ele&ent(s) and select oc*. @ou can als

hi#hli#hted desi#n ele&ent $y pressin# !>N>/0.


45/115


46/115


47/115

Explanation:When you ena$le co&pression on the sendin# and recei'in# co&puters the 7otes client andor the Do&ino ser'e

atte&pt to co&press any data $efore trans&ittin# it o'er the net"or*.

ny data $ein# sent 'ia the 7otes Re&ote -rocedure Call (7R-C) "ill $e co&pressed. 9&ail and replicated docu

are t"o e5a&ples of data that "ill $e trans&itted in co&pressed for&.

ttach&ents that are already in co&pressed for& "ill not $e further co&pressed "hen data is trans&itted.

9ncrypted data cannot $e co&pressed. o"e'er if the data is first co&pressed it can then $e encrypted.


Sub-Objective:9na$leDisa$le Co&pression

References:/. Do&ino d&inistrator 6 elp + search on: Co&pressin# net"or* data on a ser'er port

Item: 42(Ref:602.4.4.6)

fter i*e has added a ne" ser'er &ail rule "hich co&&and &ust he issue in order for the ne" rule to ta*e effec

i&&ediately%

!etRules

ell Router!ho"

ell RouterDeli'ery

ell Router 1pdateConfi#

ns"er:!etRules


48/115

Explanation:!et Rules is a ser'er co&&and used to reload the ser'er


49/115

ns"er:Guic*7otes

Explanation:Guic* 7otes is a'aila$le on the "elco&e pa#e. @ou can access Guic* 7otes $y clic*in# the arro" that appears at

of the "elco&e pa#e.

Guic* 7otes allo"s for se'eral con'eniences such as sendin# a &ail &essa#e addin# a contact to your -ersonal

=oo* include an entry in your -ersonal ournal and place a re&inder in your calendar. Guic* 7otes *eeps you fro

ha'in# to open these data$ases to perfor& the desired tas*.

he =oo*&ar* >a'orites >older or ournal does not #i'e a user the capa$ility to create and send a &ail &essa#e

he #raphic $elo" sho"s Guic* 7otes displayed on the "elco&e pa#e of a user


50/115

1p#rade her certlo#.nsf to the R6 desi#n usin# the Cprocess

!he cannot use the C process for certifiers created prior toR6

ns"er:i#rate the e5istin# 7otes certifiers to the Cprocess

Explanation:he Certificate Re'ocation ist (CR) &aintains a record of certificates that ha'e $een in'alidated. his list &ay in

certificates of e&ployees "ho are no lon#er "ith the co&pany as "ell as certificates "hose security &ay ha'e $ee

co&pro&ised. he ser'er


51/115

he ad&inistrator &ust create each CR usin# a te5teditor

he ad&inistrator &ust issue the ser'er co&&and


52/115

Certificate uthority Confi#urationdocu&ents

copy of each issued certificate that has note5pired

ll of thea$o'e

ns"er:ll of thea$o'e

Explanation:n ssued Certificate ist (C) data$ase is created as each certifier is created or &i#rated to the C process. his

data$ase is then the central point for the certifier. s such it contains all docu&ents related to the certifier. he C

data$ase stores the follo"in# ite&s:

/) copy of each issued certificate that has not e5pired

2) he certificate re'ocation list to &ana#e certificates that should no lon#er $e trusted

) Certificate uthority Confi#uration docu&ents + hese docu&ents define the necessary settin#s for the C proc

&ana#e certificates in your or#anization such as the ser'er that runs the C process for this certifier the duration

certificate "hether alternate na&es are per&itted and Re#istration uthority confi#uration infor&ation.




2. Do&ino d&inistrator 6 elp + search on: i#ratin# a 7otes or nternet certifier to the C process

Item: 4!(Ref:602.4.;.;)

fter settin# up cti'ity o##in# ho" can you 'ie" the infor&ation%


53/115


54/115

he nu&$er of unread docu&ents "ill appear ne5t to the folder na&e if the &ail file uses the 7otes 6 &ail filete&plate.

he nu&$er of unread docu&ent "ill appear ne5t to the folder na&e if the &ail file uses the 7otes 6 &ail filete&plate and the ser'er is usin# release 6

he nu&$er of unread docu&ent "ill appear ne5t to the folder na&e if the &ail file uses the 7otes 6 &ail filete&plate and the client is usin# release 6.

he nu&$er of unread docu&ents "ill appear ne5t to the folder na&e if the &ail file uses the 7otes 6 &ail filete&plate and $oth the client and ser'er are usin# release 6.

ns"er:he nu&$er of unread docu&ents "ill appear ne5t to the folder na&e if the &ail file uses the 7otes 6 &ail file te&and $oth the client and ser'er are usin# release 6.

Explanation:n 7otes 6 users no" ha'e the a$ility to see the nu&$er of unread docu&ents in a folder "ithout openin# the folde

nu&$er "ill appear in parentheses ne5t to the folder na&e in the na'i#ator. his feature is inherent in the product

does not re,uire any confi#uration. n order for the feature to "or* the &ail file &ust use the 7otes 6 &ail te&plat

$oth the client and ser'er &ust $e runnin# release 6. his can $e helpful "hen rules auto&atically file ne" &ail &e

for the user.

he #raphic $elo" sho"s a ail in$o5 and ne5t to the in$o5 in parentheses are the nu&$er of unread docu&ents

in$o5.


Sub-Objective:Reco#nize folder unread &ar*s

References:

/. Do&ino 6 elp + search on: penin# your &ail and readin# &essa#es

Item: 4#(Ref:602.2..)


55/115

ra "ould li*e to apply a setup policy to a ne" user ohn !&ithC9. o" can he apply a setup policy to this use

ra can create an e5plicit setup policy for ohn !&ith and assi#n it usin# the ssi#n -olicy tool prior tosetup.

ra can create an e5plicit setup policy for ohn !&ith and assi#n it at the ti&e ofre#istration.

ra can create an or#anizational !etup -olicy for BC9 "hich "ill auto&atically $e applied to ohn!&ith.

ll stated options are correct for applyin# a setup policy to a ne"user.

ns"er:ll stated options are correct for applyin# a setup policy to a ne"user.

Explanation:-olicies can $e applied at a hierarchical le'el in "hich case all users in that hierarchy "ill adopt the policy. o"e'e

indi'idual &ay ha'e an e5plicit policy that applies only to that user. 95plicit policies can $e applied at the ti&e of

re#istration or later usin# the ssi#n -olicy tool.


Sub-Objective:pply policy docu&ents to e5istin# users

References:/. Do&ino d&inistrator 6 elp + search on: Creatin# -olicies

2. Do&ino d&inistrator 6 elp + search on: Creatin# a setup policy settin#s docu&ent

Item: 5$(Ref:602.4.;.4)

n a Do&ino en'iron&ent usin# the Central Directory odel "hich of the follo"in# directories "ill $e in use%


56/115

Central and 1serDirectories

-ri&ary and 1serDirectories

Central and Confi#urationDirectories

-ri&ary and Confi#urationDirectories

ns"er:-ri&ary and Confi#urationDirectories

Explanation:he central directory &odel is a ne" Do&ino 6 feature. t introduces an option to the syste& ad&inistrators for the

confi#uration of the do&ain


57/115

?athy "ould li*e to deter&ine "hich policy settin#s are in place for one of her users. Which options are a'aila$le f

'ie"in# the effecti'e policy for a user%

he -olicy !ynopsis tool is her only option for 'ie"in# "hich policy has $een applied to the selecteduser.

!he can only use the 3$y !ettin#3 'ie" "ithin the -olicy Aie"er on the Confi#uration ta$ of the Do&inod&inistrator client.

!he can use either the -olicy !ynopsis tool or the 3!ho" -olicy ierarchy for3 the specific user "ith the -olicAie"er on the Confi#uration ta$ of the Do&ino d&inistrator client.

!he can only use the 3!ho" -olicy ierarchy for3 the specific user "ith the -olicy Aie"er on the Confi#uratio

of the Do&ino d&inistrator client to sho" "hich policy has $een applied to the selected user.

ns"er:!he can use either the -olicy !ynopsis tool or the 3!ho" -olicy ierarchy for3 the specific user "ith the -olicy Aion the Confi#uration ta$ of the Do&ino d&inistrator client.

Explanation:he -olicy !ynopsis tool can $e used to deter&ine a userro& this 'ie" you can choose the tas* 3Aie" the policy hierarchy for a 7otes user3 and in the fiel

policy hierarchy for3 you can select a specific user. he -olicy !ynopsis tool allo"s you to process &ore than one

a ti&e "hile the 3!ho" policy hierarchy for3 option only operates for one user at a ti&e.

he 3$y !ettin#3 'ie" "ithin the -olicy Aie"er on the Confi#uration ta$ of the Do&ino d&inistrator client or#anize

infor&ation $y settin# not $y user. his 'ie" "ould not allo" the ad&inistrator to 'ie" the settin#s for a specific us

he #raphic $elo" sho"s the -olicy !ynopsis tool dialo# $o5. he user has $een selected in the $ac*#round and

-olicy !ynopsis tool "as chosen.


Sub-Objective:Create a policy synopsis


58/115

References:/. Do&ino d&inistrator 6 elp + search on: 1sin# the -olicy !ynopsis tool to deter&ine the effecti'e policy

Item: 52(Ref:602../4./)

What is the purpose of the 39ffecti'e ccess3 $utton found in the C dialo# $o5%

o display a list of users "ith the selected le'el of access to thedata$ase

o display the actual access the selected user has $een #i'en to the

data$ase

o display and &ana#e the users "ith the selected le'el of access to thedata$ase

o display and &ana#e the actual access the selected user has $een #i'en to thedata$ase

ns"er:

o display the actual access the selected user has $een #i'en to thedata$ase

Explanation:!o&eti&es it can $e difficult to deter&ine a user


59/115


Sub-Objective:1se ne" C Roles

References:/. Do&ino d&inistrator 6 elp + search on: Confi#urin# a Data$ase C

Item: 53(Ref:602.../)

o" do you ena$le O/ co&pression for a data$ase%

1se the Co&pact !er'eras*

1se the Co&pression !er'eras*

1se the Co&pression Data$aseool

Ko to d'anced Data$ase-roperties

ns"er:Ko to d'anced Data$ase-roperties

Explanation:O/ co&pression can $e ena$led on the d'anced Data$ase -roperties ta$. t can also $e ena$led throu#h the

$utton in the 7e" Data$ase dialo# $o5 $ut this is not the only &ethod. Co&pactin# a data$ase "ill not ena$le O

co&pression. 7either the Co&pression Data$ase ool nor the Co&pression !er'er as* e5ists.

he O/ co&pression al#orith& is faster and &ore efficient than the pre'iously used uff&an al#orith&. 7ote that

&i5ed+release en'iron&ent data$ases "ill $e reco&pressed usin# the uff&an al#orith&. his reco&pression "i

de#rade perfor&ance. >or $est results use O/ co&pression in a pure+R6 en'iron&ent.


60/115

he #raphic $elo" sho"s the data$ase properties $o5 "ith the ad'anced ta$ selected. O/ co&pression can $e e

here.



References:/. Do&ino d&inistrator 6 elp + search on: Data$ase properties that opti&ize data$ase perfor&ance

2. Do&ino 6 elp + search on: ncreasin# data$ase perfor&ance and functionality

Item: 54(Ref:602.4.4.F)

1pon startup "here does the ser'er retrie'e &ail rules%

79!.7

!er'er

docu&ent

Confi#uration !ettin#sdocu&ent

ll &ail+routin# Connectiondocu&ents

ns"er:

Confi#uration !ettin#sdocu&ent

Explanation:


61/115

!er'er &ail rules allo" the ad&inistrator to define rules for handlin# &ail "hen it is deli'ered to .=L. hese

si&ilar to rules "ithin &ail files $ut act $efore the &essa#e is deli'ered to the user. d&inistrators can create rule

for specifics such as senders su$Mects attach&ents content and size.

When a ser'er starts up it re#isters the list of ser'er &ail rules stored in the Confi#uration !ettin#s docu&ent as

&onitors on .=L. he ser'er reloads the rules "hen the ad&inistrator issues the co&&and !et Rules or "h

finds a chan#e. t polls the Confi#uration !ettin#s docu&ent for chan#es appro5i&ately e'ery fi'e &inutes.


Sub-Objective:&ple&ent ail Guota Chan#es

References:/. Do&ino d&inistrator 6 elp + search on: !ettin# ser'er &ail rules

2. Do&ino d&inistrator 6 elp + search on: !et rules

Item: 55(Ref:602.4././)

What does the ne" a'a+$ased !er'er Controller in Do&ino 6 allo" you to do%

Control the Do&ino ser'er fro& the d&inistrator clientonly

Control the Do&ino ser'er fro& the We$ d&inistrator clientonly

Control the Do&ino ser'er fro& a separate a'a+$ased console called the Do&ino Console $ut not fro& thed&inistrator client

Control the Do&ino ser'er fro& the d&inistrator client the We$ d&inistrator client or a separate a'a+$asconsole called the Do&ino Console

ns"er:Control the Do&ino ser'er fro& the d&inistrator client the We$ d&inistrator client or a separate a'a+$asedconsole called the Do&ino Console


62/115

Explanation:he !er'er Controller is a a'a+$ased pro#ra& that you can use to control a Do&ino ser'er. When you start the

!er'er Controller this "ill in turn start the Do&ino ser'er that is controlled $y the !er'er Controller. When you

run a ser'er under a !er'er Controller you can send operatin# syste& co&&ands Controller co&&ands and

Do&ino ser'er co&&ands to the !er'er Controller. n ad&inistrator can use the Do&ino d&inistrator the We$

d&inistrator or the Do&ino Console to send co&&ands to the !er'er Console.

he Do&ino Console is a a'a+$ased application that runs locally in conMunction "ith the !er'er Controller. o

open the Do&ino Console for use the ad&inistrator needs to enter the co&&and


63/115

7et"or* transfer perfor&ance isenhanced

1sers can $e#in "or*in# "ith docu&ents $efore replication isco&plete

ns"er:Replication conflicts areeli&inated

Explanation:While strea&in# replication allo"s for i&pro'ed net"or* transfer reduced replication ti&e and the a$ility to "or* "

docu&ents $efore replication is co&plete it does not eli&inate replication conflicts.

!trea&in# replication is ne" to Do&ino 6. t i&pro'es replication as it in'ol'es a sin#le ser'er re,uest. ll data is p

into the data$ase. he result is a reduction in the ti&e it ta*es to replicate. n added $enefit of strea&in# replicatio

you do not ha'e to "ait for replication to co&plete $efore $ein# a$le to see replicated docu&ents in your folders.

you see a replicated docu&ent in your folder you can $e#in "or*in# on it "hile replication continues.


Sub-Objective:1se strea&in# replication features

Item: 5!(Ref:602../2./)

@ou "ant to restrict access to specific types of docu&ents and fields "ithin those docu&ents in the Do&ino Direct

95tended Directory Catalo# and the d&inistrations Re,uest data$ase "ithout &odifyin# the data$ase desi#n. W

you use for this purpose%

Kroups

95tendedC

ccess Controlist


64/115

95ecution Controlist

ns"er:95tendedC

Explanation:he 95tended C (5C) is a ne" feature in Do&ino 6 that allo"s further refine&ent of a user


65/115

7otes clientonly

Do&ino d&inistratoronly

7otes client andor the Do&inod&inistrator

ns"er:7otes client andor the Do&ino

d&inistrator

Explanation:@ou can ena$le net"or* co&pression on the 7otes client throu#h >ile -references. nce you ha'e perfor&ed the

throu#h >ile -references to ena$le net"or* co&pression it "ill $e ena$led for the local 7otes client for the port tha

selected.

@ou can also #o to the Do&ino d&inistrator #o to the !er'er pane and clic* the ser'er on "hich you "ant to ena

net"or* co&pression. When you ena$le co&pression for selected ports fro& the Do&ino d&inistrator it applies

ser'er not to the 7otes client.

he #raphic $elo" sho"s the 1ser -references dialo# $o5 for the 7otes client. he option 3Co&press net"or* dat

"ould need to $e selected to ena$le co&pression for the selected port.



References:/. Do&ino d&inistrator 6 elp + search on: Co&pressin# net"or* data on a ser'er port

Item: 5#(Ref:602../0.2)

n "hich field in the !er'er docu&ent does 9lliott


66/115


67/115

d&inister the ser'er fro& a $ro"ser (pre+7otes 6 ser'ers only) + his field allo"s ad&inistrators of pre+R6 ser'er

the We$ d&in tool.


Sub-Objective:!et !ecurity Dialo# properties $o5

References:/. Do&ino d&inistrator 6 elp + search on: Restrictin# ad&inistrator access (see Data$ase ad&inistrators)

Item: $(Ref:602...2)

>or "hich data$ases should O/ co&pression $e ena$led%

Data$ases "ith attach&ents in a pure 7otes 6en'iron&ent

Data$ases "ithout attach&ents in a pure 7otes 6en'iron&ent

Data$ases "ith attach&ents on a Do&ino 6 ser'er "ith 7otes ;clients

Data$ases "ithout attach&ents on a Do&ino 6 ser'er "ith 7otes ;clients

ns"er:Data$ases "ith attach&ents in a pure 7otes 6en'iron&ent

Explanation:he O/ co&pression al#orith& is a &ethod for co&pressin# attach&ents stored in data$ases. he O/ co&press

option is only a'aila$le for 7otes 6 data$ases. 7ote that in a &i5ed+release en'iron&ent data$ases "ill $e reco&

usin# the uff&an al#orith&. his reco&pression "ill de#rade perfor&ance. >or $est results use O/ co&pressio

pure+R6 en'iron&ent.

Objective:


68/115

&ple&ent security and replication features


References:/. Do&ino 6 elp + search on: 1se O/ co&pression for attach&ents

Item: 1(Ref:602.4.4.;)

Dallas "ants his users to recei'e notifications once e'ery three days "hen they are approachin# $ut ha'e not yet

e5ceeded their &ail ,uota. What &ust he do in the Confi#uration docu&ent for the ser'er hostin# the users< &ail f

!et the field 3'er ,uota notification3 to 3-er&essa#e3

!et the field 3'er "arnin# threshold notifications3 to 3-er&essa#e3

!et the field 3'er ,uota notification3 to 3-er ti&e inter'al3 and the 3Warnin# inter'al3 to 3Days3

!et the field 3'er "arnin# threshold notifications3 to 3-er ti&e inter'al3 and the 3Warnin# inter'al3 to 3

Days3

ns"er:!et the field 3'er "arnin# threshold notifications3 to 3-er ti&e inter'al3 and the 3Warnin# inter'al3 to 3Days3

Explanation:

here are a nu&$er of ,uota controls in the Confi#uration docu&ent.

'er "arnin# threshold notifications + his settin# specifies the fre,uency "ith "hich notifications "ill $e sent to th

"hen they e5ceed their "arnin# threshold. his is not the sa&e as their ,uota. he choices are:

7one

-er &essa#e + sends one notification per &essa#e

-er i&e nter'al + sends one notification for the specified ti&e inter'al (n additional field 3Warnin# nter'al3 "ill

to store the ti&e inter'al.


69/115

'er ,uota notification + his settin# specifies the fre,uency "ith "hich notifications "ill $e sent to the users "hen

e5ceed their ,uota. he choices are:

7one

-er &essa#e + sends one notification per &essa#e

-er i&e nter'al + sends one notification for the specified ti&e inter'al (n additional field 39rror nter'al3 "ill app

store the ti&e inter'al.

'er ,uota enforce&ent + his settin# specifies "hat to do "ith &essa#es "hen the recipient has e5ceeded his or

,uota. he choices are:

Deli'er any"ay (donileoolsRe&ote De$u##er fro& the client&enu

ssue the co&&and


70/115

ns"er:!elect >ileoolsRe&ote De$u##er fro& the client&enu

Explanation:o de$u# an a#ent that has started runnin# on a Do&ino ser'er "ith the Re&ote De$u# ser'er runnin# choose

>ileoolsRe&ote De$u##er fro& the 7otes client or Desi#ner client &enu.

he


71/115

ns"er:!he can issue co&&ands to &ore than oneser'er

Explanation:he Do&ino Console a a'a+$ased application runs locally in conMunction "ith the !er'er Controller (also a'a+$

on the ser'er. his tool offers a fe" of ad'anta#es o'er the &ore traditional Do&ino d&inistrator and We$ d&in

clients. Co&&ands can $e sent to &ultiple ser'ers. t does 7 re,uire a 7otes D. 1sin# na&e and pass"ord

authentication an ad&inistrator can use the sa&e lo#in to &ana#e ser'ers certified "ith different certifiers. heref

ans"er 3!he can use the sa&e 7otes D to authenticate "ith ser'ers certified "ith different certifiers3 is incorrect s

7otes D is not used. he Do&ino Console tool can $e used on all platfor&s e5cept pple acintosh.

lternately it should $e noted that $oth the Do&ino d&inistrator and We$ d&inistrator clients offer a full ran#e o

functions. he Do&ino Console is si&ply a console. n ad&inistrator "ould $e a$le to use any of these clients to r

the ser'er and to 'ie" li'e console infor&ation.



References:/. Do&ino d&inistrator 6 elp + search on: he !er'er Controller and Do&ino Console

Item: 4(Ref:602.4./.;)

nce Dou# has launched the Controller on the ser'er "hich of the follo"in# can he do usin# the Do&ino Console

Dropusers

Re#ister ne"users

Aie" the contents of.=L


72/115

Chan#e the Cs on a &ailfile

ns"er:

Dropusers

Explanation:he Do&ino Console a a'a+$ased application runs locally in conMunction "ith the !er'er Controller (also a'a+$

on the ser'er. his tool offers a fe" of ad'anta#es o'er the &ore traditional Do&ino d&inistrator and We$ d&in

clients as noted $elo":

+ Co&&ands can $e sent to &ultiple ser'ers.

+ t does 7 re,uire a 7otes D. 1sin# na&e and pass"ord authentication an ad&inistrator can use the sa&e lo

&ana#e ser'ers certified "ith different certifiers.+ t can $e used on all platfor&s e5cept pple acintosh.

t should $e noted that $oth the Do&ino d&inistrator and We$ d&inistrator clients offer a full ran#e of functions.

Do&ino Console is si&ply a console. n ad&inistrator "ould $e a$le to use any of these clients to drop users $ut

not $e a$le to use the Do&ino Console to re#ister users chan#e Cs or 'ie" the contents of .=L.



References:/. Do&ino d&inistrator 6 elp + search on: he !er'er Controller and Do&ino Console

Item: 5(Ref:602.4.F./)

What do you do to start the re&ote de$u##er on the ser'er each ti&e the ser'er starts%

ssue the co&&and load Rde$u# at the ser'erconsole

ssue the co&&and tell ar run< at the ser'erconsole


73/115

!elect the ser'er fro& the


74/115

-ersondocu&ent

r#anizational

-olicy

95plicit -olicydocu&ent

Des*top settin#sdocu&ent

ns"er:r#anizational-olicy

Explanation:When usin# -olicy+$ased ad&inistration you &ust first define a policy. he policy allo"s the ad&inistrator to defin

type of policy "hich esta$lishes its scope. hen the ad&inistrator can apply the 'arious types of settin#s to these u

he type of policy is defined as $ein# or#anizational if it is applied to all users under the specified certifier or as e5

is applied to a su$set of users.

n this case an or#anizational policy is called for to affect all users. nce this is created the ad&inistrator "ould c

des*top settin#s docu&ent and apply it to the or#anizational policy.

-olicy settin#s docu&ents can $e created in all of the follo"in# areas:




75/115

References:/. Do&ino d&inistrator 6 elp + search on: Custo& "elco&e pa#e deploy&ent

2. Do&ino d&inistrator 6 elp + search on: r#anizational and e5plicit policies

. Do&ino d&inistrator 6 elp + search on: -olicy assi#n&ent

Item: !(Ref:602.2.F./)

C9 Corporation has de'eloped a ne" "elco&e pa#e that all e&ployees &ust use. on chan#es the Corporate

Welco&e -a#es data$ase settin# in the des*top policy settin#s docu&ent to point to this ne" pa#e. When "ill his

users see the ne" Welco&e -a#e%

nly after on runs the 3-ush -olicy3a#ent.

7e'er: -olicy docu&ents are only used for ne"users.

he ne5t ti&e the user authenticates "ith theser'er.

nce e'ery thirty days accordin# to the policy schedule stored in indi'idual -ersondocu&ents.

ns"er:he ne5t ti&e the user authenticates "ith theser'er.

Explanation:-olicy docu&ents can $e used to push ne" settin#s to a user. Whene'er a chan#e is &ade to the -olicy docu&en$e pushed to the e5istin# users "hen they authenticate "ith the ser'er. hese docu&ents are 7 referenced on

setup. he ad&inistrator needs to do nothin# &ore than &a*e the chan#e to the -olicy docu&ent. here are no a#

run and no schedules to follo".



76/115


77/115

Sub-Objective:9sta$lish ne" =oo*&ar*s (!tartup folder and istory)

References:/. Do&ino 6 elp + !earch on: istory folder

2. Do&ino 6 elp + search on: Wor*in# "ith =oo*&ar*s

Item: #(Ref:602../.)

fter an e&ployee lea'es the co&pany el "ants to re'o*e his nternet certificate. Where does el re'o*e a cert

n the 3-eople3 'ie" of the Do&ino

Directory

>ro& the 3Certificates3 ta$ of the -ersondocu&ent

Re'o*e the nternet certificate $y deletin# the -ersondocu&ent

n the 3$y !u$Mect 7a&e3 'ie" of the nternet Certificate ist (C)data$ase

ns"er:n the 3$y !u$Mect 7a&e3 'ie" of the nternet Certificate ist (C)data$ase

Explanation:o re'o*e an nternet certificate the ad&inistrator uses the 3Re'o*e Certificate3 action in the C data$ase. 7ote t

can also $e accessed on the Confi#uration ta$ of the d&inistrator Client.

n ssued Certificate ist (C) data$ase is created as each certifier is created or &i#rated to the C process. he

the correct ans"er is 3he certifier


78/115



References:/. Do&ino d&inistrator 6 elp + search on: Re'o*in# a certificate

Item: !$(Ref:602.2.6.2)

=efore you re#ister ne" otus 7otes 6 users on your otus Do&ino 6 ser'er you "ant to specify default settin#s t

apply to all users you re#ister. Which is not an option for specifyin# 'arious default settin#s for users%

1ser !etup-rofile

d&inistration9Cs

!etup policy settin#sdocu&ent

Re#istration policy settin#sdocu&ent

ns"er:1ser !etup-rofile

Explanation:7e" to Do&ino 6 policy settin#s docu&ents allo" d&inistrators to define settin#s for populations of users. hesesettin#s are continuously enforced for the user. #reat deal can $e &ana#ed throu#h the use of -olicy docu&ents

docu&ents can $e created in any one of the follo"in# areas:

Re#istration + Defines defaults for user re#istration.

!etup + Defines the defaults "hen settin# up the users des*top. hese are #enerally ite&s in location docu&ents.


79/115


80/115

Do&ino Directory and the appropriate Cdata$ase

ns"er:

Do&ino Directory and the appropriate Cdata$ase

Explanation:he Certificate Re'ocation ist (CR) &aintains a record of certificates that ha'e $een in'alidated. his list &ay in

certificates of e&ployees "ho are no lon#er "ith the co&pany as "ell as certificates "hose security &ay ha'e $ee

co&pro&ised. he ser'er


81/115

ll options stated are $enefits of a central directory architecture o'er a distri$utedarchitecture

ns"er:

ll options stated are $enefits of a central directory architecture o'er a distri$utedarchitecture

Explanation:he central directory &odel ne"ly a'aila$le in Do&ino 6 introduces an option to the syste& ad&inistrators for the

confi#uration of their directories. his &odel uses pri&ary directories on directory ser'ers and Confi#uration Direct

&ail and application ser'ers. he pri&ary directory is a co&plete Do&ino Directory. he Confi#uration Directory &

a su$set of docu&ents that do not contain infor&ation a$out users or #roups. o retrie'e this infor&ation loo*ups

perfor&ed to the directory ser'ers.

central directory has the follo"in# $enefits:

/) -ro'ides faster access to ne" user and #roup infor&ation since this data does not need to replicate to all ser'e

or#anization. !ince &ost ser'ers "ill perfor& loo*ups to a directory ser'er this infor&ation "ill $e a'aila$le &uch

than in a distri$uted architecture.

2) central directory architecture allo"s &ail and application ser'ers hostin# Confi#uration Directories to $e less

po"erful &achines than in a distri$uted architecture. !ince they do not hold a co&plete directory the space re,uir

are less and replication is faster.

) central directory architecture allo"s for #reater control of ad&inistrati'e access to the directory o'er distri$ute

architecture. !ince ser'ers are arran#ed hierarchically ti#hter controls can $e in place for directory &odifications.

Objective:

!er'er !cala$ility and -erfor&ance unin#



Item: !3(Ref:602.4.8./)

!tuart "ould li*e to i&pro'e the a'aila$ility of ne" e&ployee na&es in the pri&ary Do&ino Directory. Currently th

replication cycle could ta*e up to si5 hours to pass the infor&ation throu#hout the "orld"ide ser'ers. What could h

i&ple&ent to si#nificantly reduce this pro$le&%


82/115

DirectoryCatalo#

Directoryssistance

o$ile DirectoryCatalo#s

Central Directory!tructure

ns"er:Central Directory!tructure

Explanation: central directory structure ne"ly a'aila$le in Do&ino 6 introduces an option to the syste& ad&inistrators for the





his ne" &odel offers the follo"in# ad'anta#es:

+ Confi#uration Directories are s&aller so less space is re,uired replication is faster and the ser'er can $e less p

+ here is no "aitin# for a co&plete replication cycle for ne" user or #roup infor&ation to $e a'aila$le. (his "ill re

the issue in this ,uestion.)

+ !ince ser'ers are arran#ed hierarchically ti#hter controls can $e in place for directory &odifications.

Directory Catalo# allo"s the ad&inistrator to $rin# na&es and #roups to#ether fro& &ultiple directory syste&s.

Directory Catalo#s are &aintained locally for the user rather than at the ser'er. While $oth are con'enient and fast

searchin# &ultiple directories Directory Catalo#s "ill still need to replicate throu#hout the "orld"ide ser'ers.

Directory ssistance allo"s an ad&inistrator to point to other directories for na&e loo*up. While this allo"s users t

na&es outside of their o"n directory it does not speed up the access to na&es in their o"n pri&ary directory.





83/115


84/115

Sub-Objective:9sta$lish ne" =oo*&ar*s (!tartup folder and istory)

References:/. Do&ino 6 elp + search on: Wor*in# "ith =oo*&ar*s

Item: !5(Ref:602..6./)

ne of the users that 9&&a supports has for#otten his nternet pass"ord. fter assi#nin# a te&porary pass"ord f

user 9&&a has su##ested that the user chan#e the nternet pass"ord to so&ethin# &ore &e&ora$le the ne5t ti&

lo#s in. o" can 9&&a force the user to chan#e his pass"ord%

!he cannot force the user to chan#e hispass"ord.

Chan#e the 'alue of the 3Re,uired chan#e inter'al3 field in the -erson docu&entto /.

Chec* the 3>orce user to chan#e nternet -ass"ord on ne5t lo#in3 settin# in the userorce user to chan#e nternet -ass"ord on ne5t lo#in3 settin# in the user


85/115

he #raphic $elo" sho"s a portion of a -erson docu&ent "ith the field 3>orce user to chan#e nternet -ass"ord o

lo#in3 set to 3@es3 and a 'alue in the 3Re,uired chan#e inter'al3 field specifyin# the nu&$er of days after "hich the

&ust pro'ide a ne" pass"ord for the 7otes D.



References:/. Do&ino d&inistrator 6 elp + search on: ana#in# nternet pass"ords

Item: !(Ref:602../2.6)

Which can $e specified as su$Mects in an e5tended C%

1ser

Kroup

!er'er

ll of thea$o'e

ns"er:ll of the

a$o'e

Explanation:he 95tended C (5C) is a ne" feature in Do&ino 6 that allo"s further refine&ent of a user


86/115

distri$ution of ad&inistrati'e responsi$ilities in the Do&ino do&ain. >or e5a&ple for so&eone "ith uthor le'el ac

the Do&ino Directory data$ase C you could further restrict access to only certain docu&ents or to certain docu

created "ith a certain 'alue in a particular field. @ou cannot use 95tended ccess to #i'e a user &ore access than

#i'en in the pri&ary C.

When confi#urin# 95tended Cs the ad&inistrator applies the settin#s to 3su$Mects.3 his allo"s the ad&inistrato

identify specific settin#s for users ser'ers and #roups as "ell as 3+Default+3 3nony&ous3 and #roups of users id$y their co&&on hierarchy (BDWC9 for e5a&ple) Must li*e in the pri&ary C. he 95tended C also offers

as a su$Mect. !elf allo"s the ad&inistrator to define user access for all users to their o"n docu&ents "ith one entr



References:/. Do&ino d&inistrator 6 elp + search on: 95tended C su$Mect

Item: !!(Ref:602.4.;.8)

What is used to create acti'ity lo##in# reports for infor&ation that Do&ino has "ritten to the Do&ino lo# file (K.

durin# acti'ity lo##in#%

7otes -

pro#ra&

Do&inod&inistrator

Run the cti'ity nalysis tool onK.7!>

ll of thea$o'e

ns"er:7otes -pro#ra&


87/115

Explanation:@ou can use the Do&ino d&inistrator to specify "hat #ets lo##ed to the Do&ino lo# file $ut the Do&ino d&inis

not used to #enerate reports fro& the infor&ation contained in the lo# file. Durin# acti'ity lo##in# Do&ino "rites

infor&ation to the Do&ino lo# file (K.7!>). he infor&ation can $e 'ie"ed usin# the cti'ity nalysis tool $ut if

"ant to #enerate reports on the infor&ation contained in the lo# f ile you can create a 7otes - pro#ra& to access

infor&ation.


Sub-Objective:nstall a 7otesDo&ino Release 6 !er'er

References:/. Do&ino d&inistrator 6 elp + search on: cti'ity lo##in#

Item: !"(Ref:602.4.8.)

fter i&ple&entin# a centralized directory structure llen finds "hich of the follo"in# to $e true%

7a&e loo*ups are easier since all directories contain user and #roupinfor&ation.

Replication is faster since only directory ser'ers &aintain a copy of the Do&inoDirectory.

ess po"erful &achines can $e used for directory ser'ers since they do not need to replicate "ith otherser'ers.

t is easier to control ad&inistrati'e access to the Do&ino Directory since only directory ser'ers &aintain user#roup infor&ation.

ns"er:t is easier to control ad&inistrati'e access to the Do&ino Directory since only directory ser'ers &aintain user and#roup infor&ation.

Explanation:


88/115

central directory structure ne"ly a'aila$le in Do&ino 6 introduces an option to the syste& ad&inistrators for the





Replication is faster usin# a centralized directory structure since the co&plete directory is not replicated $et"een aser'ers. o"e'er all ser'ers do &aintain either pri&ary (co&plete) directories or confi#uration (su$set) directories

loo*ups "ill $e easier since users "ill ta*e ad'anta#e of directory ser'ers. o"e'er it is not due to all ser'ers con

user and #roup infor&ation. Confi#uration Directories do not contain this infor&ation. ess po"erful &achines can

used for &ail and application ser'ers since they "ill not need to &aintain the co&plete directory. Directory ser'ers

replicate "ith other ser'ers to pass su$set directory infor&ation.



References:/. Do&ino d&inistrator 6 elp + search on: 1sin# a central directory architecture

Documents

Notes Domino Sys Updd