Your network contains an Active D

irectory domain named contoso.com. The domain contains 100 servers. The servers are contained in an organizational unit (OU) named Servers OU.

You need to create a group named Group1 on all of the servers in the domain. You must ensure that Group1 is adde

d only to the servers.

What should you configure?

A. a Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers OU

B. a Restricted Groups setting in a Group Policy linked to the domain

C. a Local Users and Groups

preferences setting in a Group Policy linked to Servers OU

D. a Restricted Groups setting in a Group Policy linked to Servers OU

Explanation:

Preferences in Group Policy linked to Servers OU allows you to centrally manage local users and groups

on domain member computers and is this is the correct OU for the GPO change

Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy, Group Policy preferences only App1y to Active Directory policy.

You use

preferences to configure many areas of the OS, including:

System devices, such as USB ports, floppy drives and removable media Network shares and mapping network shares to drive letters System and user environment variables

User and group accounts for the

local computer

VPN and dial-up networking connections

Printer configuration and mapping

Registry settings, schedule tasks and system services

Settings for Folder Options, Internet Options and Regional and Language Options Settings for power schemes and pow

er management

Start Menu properties and menu items

Your network contains an Active

Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2.

The domain contains a user named User1 and a global security group named Group1.

You re

configure DC2 as a member server in the domain.

You need to add DC2 as the first domain controller in a new domain in the forest.

Which cmdlet should you run?

A.

Add-AdPrincipalGroupMembership

B.

Install-AddsDomainController

C.

Install-WindowsFeature

D.

Install-AddsDomain

E.

Rename-AdObject

F.

Set-AdAccountControl

G.

Set-AdGroup

H.

Set-User

Explanation:

Since a member server does not have Active Directory Domain Services installed, you must install this role before you can configure the new Do

main Controller (which would require you to run Install-ADDSForest).

Your network contains an Active

Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1.

You need to ensure that when new client computers join the domain, their computer accounts are created in OU1 by default.

What should you do?

A. From Windows

PowerShell, run the

Move-ADObject

cmdlet.

B. From a command prompt, run the

redircmp.exe

command.

C. From ADSI Edit, configure the properties of the OU1 object.

D. From Ldp, configure the properties of the Computers container.

Explanation:

Redir

ects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in CN=Computers.

The CN=Computers container is a computer-protect

ed object. For backward compatibility reasons, you cannot (and must not) remove it.

Reference: http://technet.microsoft.com/en-us/library/cc770619.aspx