You have a single Active Directory directory service domain. There is a branch office that connects to the main office through a low-bandwidth WAN link. The first domain controller is named DC1 and is located in the main office. The branch office has a single server named Server1. Server1 runs Windows Server 2003. You are preparing to install Active Directory on Server1. You back up the system state of DC1, and you send the backup to the administrator at the branch office. You need to make Server1 an
additional domain controller in your domain, while minimizing the bandwidth usage between the two offices. What should you do?

You are a network administrator for Litware, Inc. The network consists of a single Active Directory forest that contains two domains named litwareinc.com and dev. litwareinc.com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Litware, Inc., acquires a company named Graphic Design Institute. The Graphic Design Institute network consists of a single Active Directory forest that contains a single domain named graphicdesigninstitute. com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Users in the litwareinc.com domain require access to file and print resources stored on a computer named server1.graphicdesigninstitute.com. Users in the graphicdesigninstitute.com domain require access to all computers in the litwareinc.com forest. You must provide administrators with the ability to grant users access to the required resources. What should you do?

You are the network administrator for your company. Your network consists of a single Active Directory domain. All the user accounts, groups, and application servers of the human resources (HR) department are located in an organizational unit (OU) named HR. The managers in the HR department need access to the application servers to perform administrative tasks. A local group named HRManagers exists on each application server. The HRManagers local groups supply the permissions that the HR managers require. For security reasons, the company wants user accounts for managers in the HR department to be the only members of the HRManagers groups. You need to ensure that membership of the HRManagers group on each application server is as secure as possible. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. You have two physical locations, which correspond to two Active Directory sites. A domain controller is deployed to each location. A high-speed WAN link connects the two sites. Network utilization is low. Administrators create and edit Group Policy objects (GPOs) to configure security settings, login scripts, roaming profiles, and software installation. You need to ensure that all Group Policy processing continues in the event of a local domain controller outage. What should you do?

You are a network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. You use a Group Policy object (GPO) to change the default
storage location of the My Documents folder for all user accounts. The GPO redirects the My Documents
folder to SERVER1USERFILES%USERNAME%. The Redirect the folder back to the local user profile
location when policy is removed option is selected. The network does not use roaming user profiles. The My
Documents folders of several users are very large and consume too much disk space on Server1. As a
result, users report slow response times for shared files. You need to ensure that the My Documents folder
for each user is stored and maintained on the user’s client computer. You must not affect any other policies.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.
Choose two.)

You have a single Active Directory directory service domain with Windows XP client computers. Some users receive their DNS suffix search orders by using DHCP, and some users configure their DNS suffix search orders manually. You link a new Group Policy object (GPO) to the domain to specify a DNS suffix search order for client computers. Some users report that they are not receiving the new DNS suffix search order from the GPO. You need to ensure that all users receive the DNS suffix search order from the GPO. What should you do?

You have a single Active Directory directory service domain. User accounts and computer accounts in the finance department are located in an organizational unit (OU) named Finance. The users in the finance department use local databases that are saved to either the My Documents folder or to the users desktop. The finance users each have a primary client computer, but they frequently log on to a secondary client computer. Users report that the databases that they use when they are logged on to their primary client computer are not available when they log on to their secondary client computer. You need to ensure that the finance users have access to their databases regardless of which client computer they log on to. Logon times and logoff times must not increase as a result of this change. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain with two sites. The two sites are named Site1 and Site2. All servers run Windows Server 2003. The company has two offices, and each office is configured as one of the sites. A 256-Kbps leased line connects the two offices. In addition, a site link connects the two sites. The site link is configured to replicate during off-peak hours. There are domain controllers in both sites. Site1 contains all of the operations master role holders. You plan to create Group Policy objects (GPOs) for each site. Some GPOs will be used to resolve potential support issues for a specific site, and so you need to minimize any delay in the propagation of GPOs. You need to ensure that GPOs are applied to users in the appropriate site with minimal delay. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All user accounts for users in the engineering department are located in an organizational unit (OU) named Engineering. These users’ client computers are all located in an OU named EngineeringWorkstations, which is a child OU if the Engineering OU. All users in the engineering department are members of a global group named Engineers. You create a Group Policy object (GPO) that assigns a software installation package to users in the Engineering OU. To comply with the licensing requirements for the application, the application must be uninstalled from a user’s computer when that user is moved out of the Engineering OU. A user named Francesca is transferred out of the engineering department. The user account for Francesca is moved into an OU named Research. Francesca reports that the application is still installed on her computer. You must ensure that the application is automatically uninstalled from Francesca’s computer. The application must remain on the computers of all users who are still in the Engineering OU. What should you do?