You are the network administrator for your company. The company consists of two subsidiaries named
Contoso, Ltd., and Fabrikam, Inc. The network consists of a single Active Directory forest that contains
three domains. The domain and site configuration is shown in the exhibit. (Click the Exhibit button.) A
computer named DC1.asia.contoso.com is a domain controller in the asia.contoso.com domain. DC1.asia.
contoso.com is also a global catalog server and the preferred bridgehead server for AsiaSite. The Active
Directory database on on DC1.asia.contoso.com contains 1 GB of data. The Asia departments in the
company are implementing an Active Directory-enabled application. You expect size of the database on
DC1.asia.contoso.com to increase by 200 MB. Active Directory stops responding on DC1.asia.contoso.com.
You discover that the hard disk has less than 5 MB of space remaining. You need to configure DC1.asia.
contoso.com so that Active Directory can restart. You also need to configure the server so that additional
space is available on the hard disk for the additional data that will be added to the Active Directory database.
What should you do?

You are the network administrator for your company. The network structure is shown in the exhibit. (Click the Exhibit button.) The functional level of both forests is Windows Server 2003. All three domains are Active Directory domains. Domain3 contains a computer named Server1. A shared folder on Server1 is named Share1. Users in an organizational unit (OU) named Accounts in Domain2 need access to Share1. However, whenever the users in the Accounts OU attempt to connect to Share1, they receive an error message stating that access was denied. You need to ensure that users in the Accounts OU can connect to Share1. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional and are members of the domain. Only designated IT support staff have administrative rights on client computers. The company requires all client computers to run antivirus software. The company licenses an antivirus application that is installed on a file server named Server1. An unattended installation can be performed on each client computer by running the setup command from a shared folder on Server1. Several users report that when they attempt to install the antivirus application, they receive the following error message: "You do not have sufficient privileges on this computer to perform this action." You verify that the antivirus application is not installed on any client computers. You need to ensure that all client computers have the antivirus application installed. You want to accomplish this task by using the minimum amount of administrative effort. What should you do?

You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory domain named contoso.com. The domain contains three Windows Server 2003 domain controllers. A domain controller named DC2.contoso.com fails because of a hardware failure. You decide not to rebuild the domain controller. However, because several applications refer to DC2.contoso.com by its NetBIOS name, you need to provide a new domain controller that has the same name. You install a new Windows Server 2003 computer and name it DC2. You attempt to promote the server to a domain controller in the contoso.com domain. The promotion fails and you receive the following error message. You need to install a new domain controller named DC2 in the contoso.com domain. What should you do?

You are the network administrator for your company. The company consists of two subsidiaries named Contoso, Ltd., and Fabrikam, Inc. The network consists of two Active Directory forests. The WAN connections that connect some domain controllers are unreliable. The domain and trust configuration is shown in the Network Diagram exhibit. (Click the Exhibit button.) You create shared folders on Windows Server 2003 member servers in both forests. Some of the shared folders are accessible to users from both forests. For each of the shared folders, you create a domain local group. You add global groups from domains in either forest to the domain local group. The Fabrikam, Inc., division is sold to a different company. You delete the trust relationship between the two forests. You notice that after the trust relationship is deleted, the membership lists for some of the domain local groups are no longer accurate. When you view a membership list, it contains entries without user-friendly names. A sample is shown in the Membership List exhibit. (Click the Exhibit button.) You need to delete all the unknown groups from the membership list for the domain local groups. You want to achieve this goal by using the minimum amount of administrative effort, and without modifying the access to resources for users in the contoso.com forest. What should you do?

You are a network administrator for your company. The company has offices in Paris and New York. Thenetwork consists of a single Active Directory domain that contains six domain controllers, as shown in the exhibit.

The Paris and New York offices are connected by an IP site link. The six domain controllers are configured as shown in the following table.

You notice that at regular intervals the CPU utilization on some of the file and print servers increases to 100 percent for a period of time. During this time, the servers become unresponsive to user requests. You discover that this problem occurs during Active Directory replication.

You need to ensure that the file and print servers are responsive to user requests during Active Directory replication.

What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. The relevant portion of the organizational unit (OU) structure is shown in the exhibit.

The company’s sales division consists of an inside sales department, a mobile sales department, and a telemarketing department. User objects for users in these departments are stored in the Inside, Mobile, and Telemarket OUs respectively. User objects for all junior managers and senior managers
are stored in the Managers OU. The company decides to train junior managers to perform basic administrative tasks. Junior managers are responsible for enabling and disabling accounts for all sales
users except junior managers and senior managers. You need to enable junior managers to perform the assigned administrative tasks. You must not affect any existing permissions.

What should you do?

You are a network administrator for your company. The network consists of a single Active Directory domain. The company has offices in 25 cities. Each office is configured as a single site. You are responsible for one site that is configured as shown in the exhibit. (Click the Exhibit button.) An IP site link connects your site and the site at the company’s main office. The company replaces your router with a firewall device. The firewall is configured to allow HTTP, SMTP, FTP, NNTP, global catalog queries, and VPN packets to pass. You discover that replication with other sites is not occurring. You need to ensure that you can replicate with other sites. You need to achieve this goal without removing or reconfiguring the firewall. What should you do?

You are the network administrator for Northwind Traders. The network consists of a single Active Directory forest that contains one root domain and one child domain. The forest also contains three separate sites, as shown in the Network Diagram exhibit. (Click the Exhibit button.) The network is not fully routed and there is no direct physical connection between Site1 and Site3. Site links are not bridged. You discover that the domain controllers for namerica.northwindtraders.com located in Site1 have additional accounts that are not on the domain controllers for namerica.northwindtraders.com located in Site3. You examine the directory service log in Event Viewer on a domain controller for namerica.northwindtraders.com. You discover the error message shown in the Error Message exhibit. (Click the Exhibit button.) You need to resolve the condition that is causing this error. What should you do?