You need to implement a security solution that meets the following requirements:
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. Contoso contains two global groups named Users Global and Managers Global.
Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two local groups as shown in the following table.
Each Users Resources local group has access to the local resources on the server.
You need to implement a security solution that meets the following requirements:
Managers Global members must have access to all the resources that are accessible to Users Global members.
The solution must minimize administrative effort.
What should you do?
What should you change?
Your network consists of a single Active Directory forest that contains the domains shown in the following table.
You create a universal security group named Contoso All in the Contoso domain. You plan to use Contoso All to assign permissions only on servers in the contoso.com domain. You add a group named Region1 All in the Region1 domain to Contoso\Contoso All and receive the error message shown in the exhibit.
You need to ensure that members of Region1\Region1 All can access resources that have been assigned to Contoso\Contoso All.
What should you change?
Exhibit:
You need to ensure that you can create universal security groups in the contoso
Your network consists of an Active Directory forest that contains two domains named contoso.com and Region1.contoso.com.
All servers in the network run Windows Server 2003 Service Pack 2 (SP2).
You attempt to create a universal security group and obtain the result shown in the exhibit.
You need to ensure that you can create universal security groups in the contoso.com domain.
What should you do in the contoso.com domain?
Exhibit:
You need to implement a solution to meet the following requirements:
Your network consists of one Active Directory forest that contains two domains named Domain1.contoso.com and Domain2.contoso.com.
The functional level of the forest is Windows Server 2003.
The domains contain the global security groups shown in the following table.
Each domain has three servers. Each server has a group named Sales Applications Local. The Sales Applications Local groups are used to grant permissions to resources on the servers.
You need to implement a solution to meet the following requirements:
Allow Sales department employees from any domain to access the Sales department resources in any domain.
Minimize administrative effort when membership of the Sales department changes, additional domains are added, or additional servers are added.
What should you do?
You need to ensure that you can log on to Server1 by using a domain account
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).
You have a server named Server1. You try to log on to Server1 and receive the following error message:
Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance.
You verify that you can contact a domain controller from Server1. You need to ensure that you can log on to Server1 by using a domain account.
What should you do?
Which tool should you use?
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU.
Which tool should you use?
Which tool should you use?
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2). You need to prestage 1,000 computer accounts.
Which tool should you use?
You need to ensure that users can access the file shares on Server1 by using their domain user accounts
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).
The domain contains a member server named Server1. Server1 is a file server.
You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
You need to prevent changes to the desktop backgrounds from persisting when the kiosks restart
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).
All client computers run Windows XP Professional Service Pack 3 (SP3).
Three client computers are public kiosks. All kiosks are configured to automatically log on as a domain user named KioskUser. KioskUser has a roaming profile. Users frequently change the desktop backgrounds on the kiosks. You need to prevent changes to the desktop backgrounds from persisting when the kiosks restart.
What should you do?
You need to prevent changes made to User1’s desktop from being saved when User1 logs off of Computer1
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).
All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 has a computer named Computer1. You need to prevent changes made to User1’s desktop from being saved when User1 logs off of Computer1.
What should you do?