Your network contains an Active Directory forest. The forest contains one domain named
contoso.com. The domain contains three domain controllers. The domain controllers are
configured as shown in the following table.
DC1 has all of the operations master roles installed.
You transfer all of the operations master roles to DC2, and then you uninstall Active
Directory from DC1.
You need to ensure that you can use Password Settings objects (PSOs) in the domain.
What should you do?
A.
Change the domain functional level.
B.
Upgrade DC2.
C.
Run the dcgpofix.exe command.
D.
Transfer the schema master role.
Explanation:
A) The domain functional level must be Windows Server 2008 to use PSO’s
B) DC1 needs to be upgraded
C) Recreates the default Group Policy Objects (GPOs) for a domain
D) Schema isn’t up to right level
http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh875588(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc753104.aspx
Should be A .
PSOs are available from Windows Server 2008 and up.
1
0
but it was set to w2003 due to DC1
0
0
Answer = A
http://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx
0
0
Requirements and special considerations for fine-grained password and account lockout policies
Domain functional level: The domain functional level must be set to Windows Server 2008 or higher.
https://technet.microsoft.com/en-us/library/cc770842(v=ws.10).aspx
0
0
Once you have removed the 2003 DC you can upgrade the domain functional level to 2008 to enable PSO’s
0
0
Q96: You need to ensure that you can use Password Settings objects (PSOs) in the domain.
The answer is:
B. Change the domain functional level.
Why? Because after reading this https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx, it states that, “The domain functional level must be Windows Server 2008”.
So, it doesn’t matter if you uninstall Active Directory from DC1, you would still be required to change the domain functional level to 2008.
0
0
to add to this,
the three domain controllers are in the same domain “adatum.com”. You do not need to migrate the domain controller because it is synchronized to the other controllers in advanced. To utilize PSO, you will need to have the DFL set at 2008. Then you can uninstall Active Directory or decomission the 2003 server or use it as a file server, print server, or whatever.
0
0
I know what some of you are thinking… “If a windows 2003 domain server is on my domain, can I raise the DFL to 2008?” The answer is yes, you can. See here: https://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=ws.10).aspx. Under, “Features that are available at the domain functional levels”.
So you see, the question is not about Active Directory, it’s about the requirements for PSO.
0
0
first uninstall server 2003 then change domain functional level
0
0
A!
0
0