You have a single Active Directory directory service domain. Your domain controllers are configured as shown in the following table. File and print services are on servers in Site1. Microsoft Exchange Server is installed on servers in Site2. The HR and user provisioning applications will be placed on servers in Site3. You are planning placement of the RID Master FSMO role. You need to ensure proper functionality of these applications within their sites during an extended WAN outage. On which domain controller should you place the RID Master role?

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain. What should you do?

You have a single Active Directory directory service domain. You are preparing to create a child domain. Your user account is in a global security group named Server Administrators. The Server Administrators group is in the local Administrators group on all servers. You need to install Active Directory on a server named Server1 to create the new child domain. What should you do?

You have a single Active Directory directory service domain. There is a branch office that connects to the main office through a low-bandwidth WAN link. The first domain controller is named DC1 and is located in the main office. The branch office has a single server named Server1. Server1 runs Windows Server 2003. You are preparing to install Active Directory on Server1. You back up the system state of DC1, and you send the backup to the administrator at the branch office. You need to make Server1 an
additional domain controller in your domain, while minimizing the bandwidth usage between the two offices. What should you do?

You are a network administrator for Litware, Inc. The network consists of a single Active Directory forest that contains two domains named litwareinc.com and dev. litwareinc.com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Litware, Inc., acquires a company named Graphic Design Institute. The Graphic Design Institute network consists of a single Active Directory forest that contains a single domain named graphicdesigninstitute. com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Users in the litwareinc.com domain require access to file and print resources stored on a computer named server1.graphicdesigninstitute.com. Users in the graphicdesigninstitute.com domain require access to all computers in the litwareinc.com forest. You must provide administrators with the ability to grant users access to the required resources. What should you do?

You are the network administrator for your company. Your network consists of a single Active Directory domain. All the user accounts, groups, and application servers of the human resources (HR) department are located in an organizational unit (OU) named HR. The managers in the HR department need access to the application servers to perform administrative tasks. A local group named HRManagers exists on each application server. The HRManagers local groups supply the permissions that the HR managers require. For security reasons, the company wants user accounts for managers in the HR department to be the only members of the HRManagers groups. You need to ensure that membership of the HRManagers group on each application server is as secure as possible. What should you do?

You are the network administrator for Consolidated Messenger. The network consists of a single Active Directory forest that contains three domains named consolidatedmessenger.com, child1.consolidatedmessenger.com, and child2.consolidatedmessenger.com. The functional level of the forest is Windows Server 2003.Both child1.consolidatedmessenger.com and child2.consolidatedmessenger.com contain employee user accounts, client computer accounts, and resource server computer accounts. The domain named consolidatedmessenger.com contains only administrative user accounts and computer accounts for two domain controllers. Each resource server computer provides a single service of file server, print server, Web server, or database server.Your company plans to use Group Policy objects (GPOs) to centrally apply security settings to resource server computers. Some security settings need to apply to all resource servers and must not be overridden. Other security settings need to apply to specific server roles only. You need to create an organizational unit (OU) structure to support the GPO requirements. You want to create as few GPOs and links as possible.What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. You have two physical locations, which correspond to two Active Directory sites. A domain controller is deployed to each location. A high-speed WAN link connects the two sites. Network utilization is low. Administrators create and edit Group Policy objects (GPOs) to configure security settings, login scripts, roaming profiles, and software installation. You need to ensure that all Group Policy processing continues in the event of a local domain controller outage. What should you do?

You are a network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. You use a Group Policy object (GPO) to change the default
storage location of the My Documents folder for all user accounts. The GPO redirects the My Documents
folder to \\SERVER1\USERFILES\%USERNAME%. The Redirect the folder back to the local user profile
location when policy is removed option is selected. The network does not use roaming user profiles. The My
Documents folders of several users are very large and consume too much disk space on Server1. As a
result, users report slow response times for shared files. You need to ensure that the My Documents folder
for each user is stored and maintained on the user’s client computer. You must not affect any other policies.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.
Choose two.)

You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory forest
that contains a single domain named contoso.com. You have a user account named CONTOSO\admin that
is a member of the Domain Admins global group. You need to create a new child domain named NA.
contoso.com in the forest. You install a stand-alone Windows Server 2003 computer named DC3. You use
the Active Directory Installation Wizard to promote DC3 to a domain controller in the new domain. You
choose to create a domain controller for a new child domain in an existing domain tree. You enter the user
name and password for CONTOSO\admin. You choose contoso.com as the parent domain, and you type
NA as the name of the child domain. You receive the error message shown in the exhibit.

You need to be able to create the new child domain. What should you do?