You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. The domain functional level of each domain is set to Windows 2000 mixed. You need to enable users from both domains to access resources in both domains. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. The sales department uses Windows Vista client computers. The finance department uses Windows XP client computers. All client computers are in the Clients organizational unit (OU). A software restriction policy is linked to the Clients OU. You are planning a new certificate autoenrollment Group Policy object (GPO) named AutoEnroll for the sales department client computers. You need to ensure that the AutoEnroll GPO applies to only the Windows Vista client computers. What should you do?

You have a single Active Directory directory service domain. Web servers are located in an organizational unit (OU) named Web. You need to enforce strong passwords for administrators who log on to domain controllers. You must enforce account lockout policy for administrators who log on locally to Web servers. What should you do?

Your company has a single Active Directory directory service forest with four domains. The domains are named contoso.com, corp.contoso.com, fabrikam.com, and corp.fabrikam.com. Users in the corp.contoso.com domain frequently access resources that are located in the corp.fabrikam.com domain. You need to improve user logon times from the corp.contoso.com domain to the corp.fabrikam.com domain. What should you do?

You have a single Active Directory directory service domain. Your company has a main office and multiple branch offices configured in a hub-and-spoke network topology. Each office has an Active Directory site. You need to ensure replication to all sites while preventing direct replication between branch offices. What should you do?

Your company has a single Active Directory directory service domain with several top-level organizational units (OUs). There is one OU for each of the major departments, and an OU named Network Security. All user accounts are placed into their respective department OUs. You create a group named Help Desk, and you place the user accounts for help desk technicians into this group. You need to allow the help desk technicians to administer all user accounts except the accounts in the Network Security OU. Your solution must also allow the help desk technicians to administer accounts in future new top-level OUs without requiring the necessary rights to be manually assigned. What should you do?

Your company has a Windows Server 2003 environment with a single Active Directory directory service forest. The forest has multiple domains and two sites named Site1 and Site2. Site1 has six domain controllers. Two of the domain controllers are global catalog servers. Site2 has three domain controllers. The WAN link between Site1 and Site2 is slow. You are preparing the environment for an Active Directory application that requires universal group membership to make authorization decisions. Application servers will be located in Site1 and Site2. You need to prepare the Active Directory environment for the introduction of the Active Directory application. What should you do?

Your company has an Active Directory directory service forest with a forest root domain and a child domain. You have two Active Directory sites named Site1 and Site2. The two sites represent physical locations that are connected by a WAN link. All domain controllers are located in Site2. All users log on to the child domain. Several users in Site1 use computers that run Windows NT 4.0 operating systems. You configure a new domain controller for each domain, and you place the new domain controllers in Site1. You need to ensure that all users in Site1 can change their passwords in the event of a WAN link failure. What should you do?

Your company has offices in three locations. The company has an Active Directory directory service domain with three Active Directory sites representing the physical locations. The sites are named Site1, Site2, and Site3. You configure domain controllers in Site1 and Site3. There is no network connectivity between Site1 and Site3. You want to enable replication of all objects between the three sites. What should you do?

You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles: schema master and domain naming master. DC1 in each child domain performs the following three operations master roles: PDC emulator master, relative ID (RID) master, and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a namechange, the domain administrator of europe.contoso.com changes the Last name field of Nancy’s user account from Buchanan to Anderson. The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan. You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group. What should you do?