Your company has a single Active Directory directory service forest with a forest root domain and a child domain. The child domain is set to the default domain functional level. You install a second domain controller in the child domain by promoting a server named SVR1. You need to rename SVR1 to DC2, and you must ensure that there will be no interruption in the ability of client computers to authenticate to DC2, except during reboot. What should you do?

You are the network administrator for a bank that has a main office and many small branch offices. The
bank’s network consists of a single Active Directory domain. All servers run Windows Server 2003. The
domain has an organizational unit (OU) for each branch office. Group Policy objects (GPOs) linked to these
OUs are used to configure bank resources. Under each branch office’s OU, there is an OU named
UserAccounts that contains user accounts and an OU named Workstations that contains client computer
accounts. A single administrative user at each branch office provides desktop support and administration for
the branch office. The number of support calls for the branch office administrators recently increased
because users are making configuration changes to their computers. You need to restrict desktop features
and administrative tools for all users except the administrative user in each branch office. You create a GPO
that applies the desktop restrictions. What else should you do?

You are the network administrator for your company. The network consists of a single Active Directory
domain. The domain contains Windows Server 2003 print servers and printer objects. A group named
PrinterSupport needs to be able to manage the printers and print queues in the domain. The PrinterSupport
group also needs to manage the printer objects in Active Directory. The PrinterSupport group does not need
to perform any other tasks. You need to grant the PrinterSupport group only the permissions that it needs.
Which action or actions should you take? (Choose all that apply.)

You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. The
company has one office in New York and another office in Ottawa. Each office is configured as an Active
Directory site. Each site contains two domain controllers. The network is configured to display a legal notice
on the computer screens of all users before they log on to their client computers. At the request of the legal
department, you make changes to the wording of the notice by changing the settings in a Group Policy
object (GPO). The GPO is linked to the domain. The legal department reports that not all users are
receiving the new notice. You discover that users in the Ottawa office receive the new notice, but users in
the New York office receive the old notice. The problem continues for several days. You need to ensure that
the new notice appears correctly on all computers in the network. What should you do?

Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers. In the branch offices, searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices. What should you do?

You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects (GPOs) in the corp.contoso.com domain. What should you do?

You have a single Active Directory directory service domain. Users work in one of four departments. You are planning to implement a Standard Desktop policy. You will test this Standard Desktop policy on the users in the HR department prior to applying it to the rest of the companys users. You create a Group Policy object (GPO) named Standard Desktop and apply the desired settings to the GPO. You need to ensure that the Standard Desktop GPO is applied only to users in the HR global security group. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. Except for IT staff, users are not local administrators on client computers. The company obtains a new application for order processing. This application must be installed on each client computer. The application is contained in an .msi file. You copy the .msi file to a shared folder on a file server. You assign the
Authenticated Users group the Allow – Read permission for the shared folder. To deploy the application, you instruct users to double-click the .msi file in the shared folder. When users attempt to install the application, they receive an error message, and setup fails. You need to configure the network so that the application can be installed successfully. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)