HCL-DOM-AADM-12 HCLSoftware Certified Associate Administrator Exam - Notes/Domino 12 Questions and Answers

The Files tab in the Domino Administrator Client is the central management area for database-level operations. From this tab, administrators can access replication tools to manually trigger or manage the synchronization of database replicas across servers. Additionally, it provides access to the Tools pane , where maintenance utilities like Compact (to reduce file size) and Fixup (to repair corrupted databases) are located for server-side maintenance.

=======

The Server > Status tab in the Domino Administrator Client is the central monitoring hub. It provides a real-time view of all active server tasks (like the Router, AdminP, or HTTP), allows administrators to see the current status of those tasks, and provides access to the server console for tracking system events and performance metrics directly.

=======

To manage multiple users efficiently, Domino utilizes Groups . By creating a Group document in the Domino Directory and adding individual user names to that group, administrators can simplify tasks such as addressing email to a large list or assigning Policies (Desktop, Security, Mail settings, etc.) to many people at once rather than configuring them individually.

=======

In HCL Domino, the registration process is the primary way to establish a user's identity within the domain. When an administrator uses the Domino Administrator Client to register a person, the system generates a Person document in the Domino Directory (names.nsf), which contains the user's public key and configuration. Simultaneously, it creates a Notes ID file , which stores the user's private key required for authentication and encryption. While a mail file is often created as part of this workflow, the document and ID file are the fundamental identity components.

=======

Desktop Policies are used by administrators to standardize the Notes client environment and enforce security behavior. Two key security-related settings managed through these policies include enforcing ID file locking , which automatically locks the user's ID after a specific period of inactivity to prevent unauthorized access on a shared workstation. Additionally, policies can force Smart Upgrade , ensuring that all users are running the approved, secure version of the Notes client software by automating the installation of updates.

=======

The Updall (Update All) task is the primary maintenance utility responsible for updating database views and full-text search indexes in HCL Domino. While the "Update" task runs frequently to handle immediate view changes, Updall is typically used for more comprehensive indexing tasks, such as rebuilding indexes or updating them on a specific schedule to ensure users can search the contents of databases accurately.

=======

In HCL Domino, the mail.box database (or databases, if multiple are configured) acts as the temporary holding area or "staging ground" for all transit mail. When mail arrives at the server—whether from a local Notes user, another Domino server, or via SMTP—it is deposited into mail.box. The Router task then monitors this database, reads the recipient information, and moves the message to its final destination (the user's mail file) or transfers it to another server.

=======

The Domino Attachment and Object Service (DAOS) provides significant storage efficiency. Its main benefit is reducing disk usage by storing shared attachments only once . Instead of every user's mail file containing a separate copy of a large attachment, DAOS extracts the file to a central repository and places a small header (ticket) in each user's document, dramatically decreasing the overall storage footprint on the server.

=======

The Administration Process (AdminP) is a core server task in HCL Domino designed to automate administrative requests that would otherwise require manual intervention. When an administrator makes a change in the Domino Directory—such as renaming a user, deleting a group, or moving a mail file—the request is posted to the Administration Requests database (admin4.nsf). AdminP then processes these requests across all servers in the domain, ensuring that Access Control Lists (ACLs), person documents, and reader/author fields are updated automatically to maintain domain-wide consistency.

=======

After the physical installation of the Domino binaries (the "program files") is complete, the server is not yet functional. The administrator must run the Server Setup Utility . This utility (which can be run via a graphical interface or through a web browser in recent versions) guides the administrator through naming the server, establishing the organization, setting up the first administrator, and choosing which initial services (like HTTP or SMTP) to enable.

=======

Domino replication occurs in two primary directions: Push and Pull . In Pull replication, the local server asks the remote server for changes. In Push replication, the local server sends its changes to the remote server. Most standard Connection documents are configured for "Push-Pull" replication, which is a bidirectional exchange ensuring both replicas become identical during the task.

=======

AdminP is designed to automate complex, multi-server tasks. Renaming a user is a primary function, as it requires updating the Directory, ACLs, and Reader/Author fields across the entire domain. Moving a mail file to a new server is another key function; AdminP automates the creation of the new replica, the synchronization of data, and the eventual deletion of the old mail file, while simultaneously updating the user's Person document to point to the new location.

=======

The Domino Attachment and Object Service (DAOS) stores attachments separately from NSF files. When documents are deleted, the associated attachment files (.NLO) are not immediately removed from the storage. To reclaim this physical disk space, an administrator must:

Issue the tell daosmgr prune command : This identifies and deletes attachment files that are no longer referenced by any database and have exceeded the deferral interval.

Issue the tell daosmgr resync command : This synchronizes the DAOS catalog (daoscat.nsf) with the physical files on disk to ensure the repository is accurate.

=======

Security within an HCL Domino database is governed by the Access Control List (ACL) . The ACL defines specific access levels—such as Manager, Designer, Editor, Author, Reader, or Depositor—for every user, group, or server that interacts with the file. While a Notes ID is required to prove identity to the server, the ACL entry specifically dictates what that user is permitted to do inside that particular database.

=======

To verify which policies are currently governing a specific user, an administrator checks the Policies tab within that user’s Person document in the Domino Directory. This tab displays the "Effective Policy," which is the result of all Organizational and Explicit policies assigned to that individual. This is the definitive location to see which administrative rules are being pushed to the user's client and mail file.

=======

In HCL Domino, the Relay Host field (found in the Configuration Settings document under the Router/SMTP > Basics tab) is used to direct the Domino Router to send all outbound internet mail to a specific external SMTP server or gateway. This is common when an organization uses an upstream security appliance or an ISP's mail server to handle external delivery rather than having the Domino server resolve MX records and connect to destination servers directly.

=======

Domino Domain Monitoring (DDM) provides a centralized collection and display of server events across an entire domain. It uses "probes" to check various subsystems (like Mail, Security, or Replication). When a probe finds an issue, it generates a report in the ddm.nsf database, allowing administrators to monitor the health of multiple servers from a single interface.

=======

Notes authentication is a "challenge-response" process that requires two primary components. First, the user must have an ID file containing their private key to sign the authentication request. Second, the server must have a matching user name in the Domino Directory (names.nsf) that contains the user's corresponding public key to verify the signature. Without both pieces, the secure handshake between the client and server cannot be completed.

=======