Your network contains an Active Directory domain named contoso.com.
You need to create one password policy for administrators and another password policy for
all other users.
Which tool should you use?

Your network contains an Active Directory forest. The forest contains one domain named
contoso.com.
You discover the following event in the Event log of domain controllers: “The request for a
new accountidentifier pool failed. The operation will be retried until the request succeeds.
The error is ” %1 “”
You need to ensure that the domain controllers can acquire new account-identifier pools
successfully.

What should you do?

Your network contains an Active Directory forest.
All users have a value set for the Department attribute.
From Active Directory Users and Computers, you search a domain for all users who have a
Department attribute value of Marketing. The search returns 50 users.
From Active Directory Users and Computers, you search the entire directory for all users
who have a Department attribute value of Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing
department returns all of the users who have the Marketing Department attribute.
What should you do?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 and GPO2 are
linked to the Sales OU and contain multiple settings.
You discover that GPO2 has a setting that conflicts with a setting in GPO1. When the
policies are applied, the setting in GPO2 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GPO2. The solution
must ensure that all non-conflicting settings in both GPOs are applied.

Your network contains an Active Directory domain. The domain is configured as shown in
the exhibit.

You have a Group Policy Object (GPO) linked to the domain.
You need to ensure that the settings in the GPO are not processed by user accounts or
computer accounts in the Finance organizational unit (OU). You must achieve this goal by
using the minimum amount of administrative effort.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The Administrator deletes an OU named OU1 accidentally.
You need to restore OU1. Which cmdlet should you use?

A corporate network includes a single Active Directory Domain Services (AD DS) domain. All
regular user accounts reside in an organizational unit (OU) named Employees. All
administrator accounts reside in an OU named Admins.
You need to ensure that any time an administrator modifies an employee’s name in AD DS,
the change is audited.
What should you do first?

Your network contains an Active Directory domain named contoso.com.
You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of
the server roles that BPA supports on each domain controller.
You must achieve this goal by using the minimum amount of administrative effort.
Which tools should you use? (Each correct answer presents part of the solution. Choose
three.)

Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?

A corporate environment includes two Active Directory Domain Services (AD DS) forests, as
shown in the following table.

You need to ensure that users in the contoso.com domain can access resources in the
eng.fabrikam.com domain.
What should you do?