You are the network administrator for your company. Your network consists of a single Active Directory domain. All servers run Windows Server 2003. You use Group Policy objects (GPOs) to distribute software. Your company uses two different applications to view graphics. Users are allowed to choose which program they will use based on the features and formats they require. Only the users are allowed to decide which of these two applications will be installed. You need to configure the GPOs to install either graphics application based on the user’s choice. What should you do?

Your company has a single Active Directory directory service forest with a forest root domain and four child domains. The child domains are based on geographic location.You are designing an Active Directory delegation strategy that must meet the following requirements: The Directory Services team must have rights to all Active Directory objects in every domain in the forest.Administrators for each geographic location must have rights to all Active Directory objects in their child domain.All users must be granted the least privileges necessary to perform their job. You need to design an administrative model for your forest. Which two solutions should you add into your design? (Each correct answer presents part of the solution. Choose two.)

Your company has a main office and a single branch office. The two offices are connected through a WAN link. You have Active Directory directory service site objects for each office. Domain controllers are associated with the appropriate site objects. Users in the main office are currently authenticated by domain controllers in the branch office. You need to ensure that users in the main office are authenticated by the domain controllers in the main office. What should you do?

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest. What should you do?

Your company has a single Active Directory directory service domain. The company has five Active Directory sites on the West coast and five Active Directory sites on the East coast. The West coast sites and the East coast sites are in two separate hub-and-spoke configurations that are separated by a firewall. All Active Directory replication between the West coast and East coast occurs between a single West coast domain controller named WestDC1 and a single East coast domain controller named EastDC1. You need to ensure that if WestDC1 fails, other West coast domain controllers continue to replicate with each other, but not with East coast domain controllers. What should you do?