Your company has a main office in Chicago and a branch office in New York. The company has a single Active Directory directory service forest with four domains. Two of the domain controllers are described in the following table. An application has a server component and a client component. When the server component is installed, several schema classes and attributes are added. A user in the ne.sales.contoso.com domain installs the client component on his client computer. You then install the server component. Thirty minutes after you install the server component, the user attempts to run the client component, but receives an error message stating that the schema objects cannot be found. You verify that the objects are present on DC1. The users logon server is DC4. You need to ensure that the user can immediately run the client component. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain with two sites named Site1 and Site2. Site1 contains two domain controllers. Site2 contains one domain controller. Each site contains two member servers. All domain controllers are backed up every night. Each of the domain controllers is installed with a similar hardware configuration, which includes a single processor and a single hard disk. You create several user accounts on the domain controller in Site2. The hard disk on that domain controller fails. You install a new hard disk on the domain controller and restore the domain controller from the most recent backup tape. You notice that the new user accounts you created on the domain controller do not appear. The only way that you can restore the user accounts is to re-create them. You need to configure the domain controllers so that the loss of data in Active Directory is minimized during a similar hard disk failure. What should you do?

Your company has a single Active Directory directory service forest with three domains and multiple sites.You need to manually create intersite connections for a site named Site1. You need to ensure that the KCC continues to generate the intrasite replication topology within each Active Directory site. Which command should you run?

You are a network administrator for Litware, Inc. The network consists of a single Active Directory domain named sales.litwareinc.com. The Active Directory database is contained on a Windows Server 2003 domain controller named DC1. The hard disk that contains the Active Directory database fails. You restart DC1 in Directory Services Restore Mode. When prompted to log on, you type administrator@sales.litwareinc.com as your user name and enter your domain password. Your logon attempt fails. You need to log on to DC1 to complete the restore operation. What should you do?

You have a single Active Directory directory service domain. A domain controller named DC1 cannot replicate with other domain controllers. DC1 holds no FSMO roles. You notice that the time on DC1 is 11:30 AM while the time on all the other domain controllers is 11:00 AM. You need to ensure that DC1 can immediately replicate with other domain controllers. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory
domain. The domain contains an organizational unit (OU) named Research. All users who have user
accounts in the Research OU use portable computers that run Windows XP Professional. You create a
Group Policy object (GPO) named PowerManagement and link it to the Research OU. You configure the
PowerManagement GPO to enable the Prompt for password on resume from hibernate/suspend policy. A
user named Marie has a user account in the Research OU. Marie reports that she is not prompted for a
password when her computer resumes from hibernation. You need to ensure that Marie immediately has
password protection for her portable computer when resuming from hibernation mode. What should you do?

You are a network administrator for your company. The network consists of a single Active Directory forest
that contains one domain. The company has its main office and one branch office in San Francisco. The
company has additional branch offices in Chicago, New York, and Toronto. Administrators at the main office
are responsible for managing all objects in the domain. Administrators at each branch office are responsible
for managing user and computer objects for employees who work in the same branch office as the
administrator. Administrators for the San Francisco branch office are also responsible for managing user
and computer objects for employees who work in the main office. These users are managed as a single
unit. You want administrators to be authorized to make changes only to the objects for which they are
responsible. You need to plan an organizational unit (OU) structure that allows the delegation of required
permissions. You want to achieve this goal by using the minimum amount of administrative effort. Which OU
structure should you use?

Figure A

Figure B

Figure C

Figure D

You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. The company decides to make five Windows XP
Professional computers available in a public area for use by visitors. These computers are to be used only
for browsing public Web sites. A Web browser is the only application that will be run on these computers.
You make these computers members of the Active Directory domain. You create a new organizational unit
(OU) named Restricted Computers and place the five computer accounts in this OU. You configure these
computers to automatically log on a user named Restricted User each time the computer is started. The
Restricted User account does not have administrative rights on the computer or on the domain. You need to
configure the five computers so that they can access public Web sites but cannot run other applications.
The restrictions must not affect other users or computers on the network. What are two possible ways to
achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You are the network administrator for your company. The network consists of a single Active Directory forest. The forest consists of 19 Active Directory domains. Fifteen of the domains contain Windows Server 2003 domain controllers. The functional level of all the domains is Windows 2000 native. The network also consists of a single Microsoft Exchange 2000 Server organization. You need to create groups that can be used only to send e-mail messages to user accounts throughout the company. You want to achieve this goal by using the minimum amount of replication traffic and minimizing the size of the Active Directory database. You need to create a plan for creating e-mail groups for your company. What should you do?

Your company has a single Active Directory directory service forest. All user accounts are located in the Users container. You need to create a number of organizational units (OUs) that will be used to store user accounts. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)