Your company has two Active Directory Domain Services (AD DS) domains, Domain1 and Domain2. A two-way
trust relationship exists between the domains.
Users in both domains can log on to client computers in only their own domains. System logs on the domain
controllers display the error message:
“Clock skew too great.”
when users in Domain1 attempt to log on to client computers in Domain2.
You need to ensure that users can log on to client computers in both domains.
What should you do?

Your company has an Active Directory Domain Services (AD DS) forest with a single domain named contoso.
com. The design of the organizational units (OUs) and Group Policy objects (GPOs) is shown in the exhibit.
(Refer to the Exhibit.)

Multiple computer configuration settings and user configuration settings are defined in the Kiosk Computers
GPO.
A security audit indicates that user configuration settings that are defined in the Kiosk Computers GPO are not
applied when users log on to client computers that are in the Kiosk Computers OU.
You need to ensure that the user configuration settings are correctly applied.
What should you do?

You have a single Active Directory Domain Services (AD DS) site. All client computers run Windows 7. Users in
the marketing department use a custom application.
You create a new Group Policy object (GPO) and linkit to the site.
Users in the marketing department then report that they are unable to use the custom application.
You need to ensure that all users in the marketing department are able to use the custom application. You need
to ensure that all other users continue to receive the new GPO.
What should you do?

You use Group Policy to standardize Internet Explorer settings on Windows 7 client computers. Users
occasionally change the Internet Explorer settings on individual client computers.
The company wants to maintain a standard Internet Explorer configuration on all client computers.
You need to ensure that the standard Internet Explorer configuration is in place each time users log on to client
computers.
What should you do?

Your company’s network includes client computers that run Windows 7.
You design a wireless network to use Extensible Authentication ProtocolCTransport Level Security (EAP-TLS).
The Network Policy Server has a certificate installed.
Client computers are unable to connect to the wireless access points.
You need to enable client computers to connect to the wireless network.
What should you do?

Your company infrastructure includes a Windows Server 2008 R2 file server and 1,000 Windows 7 Enterprise
client computers.
The company wants to require a secure connection between client computers and the file server.
You need to create and deploy a Group Policy object(GPO) that includes a rule for Windows Firewall with
Advanced Security.
What should you do?

You deploy Windows 7 to the computers that are usedby your company’s Web developers. All Web developer
user accounts are in a single organizational unit (OU).
Internet Explorer is blocking pop-up windows for multiple internal Web applications that are hosted ondifferent
servers.
You need to use Group Policy to ensure that Internet Explorer does not block pop-up windows for internal Web
applications.
What should you do?

Your network has client computers that run Windows 7 Enterprise.
You plan to deploy new administrative template policy settings by using custom ADMX files. You create the
custom ADMX files, and you save them on a network share.
You start Group Policy Object Editor (GPO Editor).
The custom ADMX files are not available in the Group Policy editing session. You need to ensure that the
ADMX files are available to the GPO Editor.
What should you do?

When a user attempts to connect to a server named Server1 by using Remote Desktop Connection (RDC), he
receives the following error message:
“The connection was denied because the user accountis not authorized for remote
login.”
You need to assign the least amount of privilege tothe user to ensure that he can connect to Server1 by using
RDC.
To which group should you add the user?

A company has an Active Directory Domain Services (AD DS) forest with a single domain.
Domain controllers are located in the company’s offices in New York and Boston.
You deploy a group policy at the domain level that includes security filtering.
You discover that Group Policy object (GPO) settings are being applied to computers in the New York office,
but not to computers in the Boston office.
You suspect there might be replication problems with the policies.
What should you do?