You are the network administrator for your company. The network consists of a single Active Directory domain. The domain includes an organizational unit (OU) named TerminalServers and a global group named Accounting. The TerminalServers OU contains all of the Windows Server 2003 computer accounts running Terminal Services. Members of the Accounting group connect to terminal servers to access their software applications. You create a Group Policy object (GPO) and link it to the TerminalServers OU. You configure the GPO to publish a software installation package that installs the most recent tax application. Users in the Accounting group report that the new tax application is not installed on any of the terminal servers. You log on to one of the servers running Terminal Services and attempt to use Add or Remove Programs in Control Panel. When you select Add New Programs, you receive the following error message: “Applications are not available to install from the network in this mode.” You need to ensure that the new tax application is installed on the computers running Terminal Services. What should you do?

You are the network administrator for your company. Your network consists of a single Active Directory domain. All servers run Windows Server 2003. You use Group Policy objects (GPOs) to distribute software. Your company uses two different applications to view graphics. Users are allowed to choose which program they will use based on the features and formats they require. Only the users are allowed to decide which of these two applications will be installed. You need to configure the GPOs to install either graphics application based on the user’s choice. What should you do?

Your company has a single Active Directory directory service forest with a forest root domain and four child domains. The child domains are based on geographic location.You are designing an Active Directory delegation strategy that must meet the following requirements: The Directory Services team must have rights to all Active Directory objects in every domain in the forest.Administrators for each geographic location must have rights to all Active Directory objects in their child domain.All users must be granted the least privileges necessary to perform their job. You need to design an administrative model for your forest. Which two solutions should you add into your design? (Each correct answer presents part of the solution. Choose two.)

Your company has a main office and a single branch office. The two offices are connected through a WAN link. You have Active Directory directory service site objects for each office. Domain controllers are associated with the appropriate site objects. Users in the main office are currently authenticated by domain controllers in the branch office. You need to ensure that users in the main office are authenticated by the domain controllers in the main office. What should you do?

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest. What should you do?

Your company has a single Active Directory directory service domain. The company has five Active Directory sites on the West coast and five Active Directory sites on the East coast. The West coast sites and the East coast sites are in two separate hub-and-spoke configurations that are separated by a firewall. All Active Directory replication between the West coast and East coast occurs between a single West coast domain controller named WestDC1 and a single East coast domain controller named EastDC1. You need to ensure that if WestDC1 fails, other West coast domain controllers continue to replicate with each other, but not with East coast domain controllers. What should you do?

You have a single Active Directory directory service domain. You have several domain security policies in place. The relevant part of the network consists of the servers shown in the following table. You create two global security groups named Sales Admins and Research Admins. You add the users in the sales and research departments into their respective groups. You need to allow the sales and research departments to administer their own Active Directory user, computer, and group objects, while maintaining the existing security policies of the company. What should you do?

Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. You create a forest trust relationship between contoso.com and fabrikam.com. You need to enable selective authentication between contoso.com and fabrikam.com. Which tool should you use?

You are the network administrator for Blue Yonder Airlines. The company has offices in Toronto, New York, and Chicago. The network connections are shown in the exhibit.

The network consists of two Active Directory domains. User objects for users in the Toronto office and the New York office are stored in the blueyonderairlines.com domain. User objects for users in the Chicago office are stored in the production.blueyonderairlines.com domain. Active Directory is configured as shown in the following table. Users in the New York office frequently report that they cannot log on to the network, or that logging on takes a very long time. You notice increased global catalog queries to servers in the Toronto office during peak logon times. You need to improve logon performance for users in the New York office without
increasing WAN traffic that is due to replication. What should you do?

You are the network administrator for the Baldwin Museum of Science. The network consists of a single Active Directory forest that contains one domain named baldwinmuseumofscience.com. You need to deploy a new domain named NA.baldwinmuseumofscience.com as a child domain of baldwinmuseumofscience.com. You install a new stand-alone Windows Server 2003 computer named DC1. You plan to make DC1 the first domain controller in the NA.baldwinmuseumofscience.com domain. You configure DC1 with a static IP configuration. You run the Active Directory Installation Wizard on DC1. The wizard prompts you for the network credentials to use to join the NA.baldwinmuseumofscience.com domain to the forest. You enter the appropriate credentials for an account in the baldwinmuseumofscience.com domain. You receive an error message stating that a domain controller in the baldwinmuseumofscience.com domain cannot be located. You need to be able to promote DC1 to a domain controller as the first domain controller of the child domain in the existing forest. What should you do?