You need to rename SVR1 to DC2, and you must ensure that there will be no interruption in the ability of clien
Your company has a single Active Directory directory service forest with a forest root domain and a child domain. The child domain is set to the default domain functional level. You install a second domain controller in the child domain by promoting a server named SVR1. You need to rename SVR1 to DC2, and you must ensure that there will be no interruption in the ability of client computers to authenticate to DC2, except during reboot. What should you do?
You need to ensure that administrators can access domain controller console sessions locally and not remotely
Your company has a single Active Directory domain. All servers in your environment run Windows Server 2003. You plan to remove all Terminal Services access for the domain controllers. You need to ensure that administrators can access domain controller console sessions locally and not remotely.
What should you do?
What else should you do?
You are the network administrator for a bank that has a main office and many small branch offices. The
bank’s network consists of a single Active Directory domain. All servers run Windows Server 2003. The
domain has an organizational unit (OU) for each branch office. Group Policy objects (GPOs) linked to these
OUs are used to configure bank resources. Under each branch office’s OU, there is an OU named
UserAccounts that contains user accounts and an OU named Workstations that contains client computer
accounts. A single administrative user at each branch office provides desktop support and administration for
the branch office. The number of support calls for the branch office administrators recently increased
because users are making configuration changes to their computers. You need to restrict desktop features
and administrative tools for all users except the administrative user in each branch office. You create a GPO
that applies the desktop restrictions. What else should you do?
Which Group Policy setting should you enable?
Your company has a single Active Directory directory service domain. Member servers run Windows Server 2003. You need to ensure that server message block (SMB)signing is enabled for incoming SMB sessions.
Which Group Policy setting should you enable?
Which action or actions should you take? (Choose all that apply
You are the network administrator for your company. The network consists of a single Active Directory
domain. The domain contains Windows Server 2003 print servers and printer objects. A group named
PrinterSupport needs to be able to manage the printers and print queues in the domain. The PrinterSupport
group also needs to manage the printer objects in Active Directory. The PrinterSupport group does not need
to perform any other tasks. You need to grant the PrinterSupport group only the permissions that it needs.
Which action or actions should you take? (Choose all that apply.)
Which tool should you use?
Your company has an Active Directory directory service domain. All servers in your environment run Windows Server 2003 and are members of the domain. You apply an IPSec policy to a Group Policy container that contains all servers. One server does not appear to have the policy applied. You need to identify which IPSec policies are being applied to the server.
Which tool should you use?
You need to ensure that
You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. The
company has one office in New York and another office in Ottawa. Each office is configured as an Active
Directory site. Each site contains two domain controllers. The network is configured to display a legal notice
on the computer screens of all users before they log on to their client computers. At the request of the legal
department, you make changes to the wording of the notice by changing the settings in a Group Policy
object (GPO). The GPO is linked to the domain. The legal department reports that not all users are
receiving the new notice. You discover that users in the Ottawa office receive the new notice, but users in
the New York office receive the old notice. The problem continues for several days. You need to ensure that
the new notice appears correctly on all computers in the network. What should you do?
Which files should you specify?
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. All domain controllers are configured to audit specific events. You are developing a security monitoring plan for the domain controllers.
You must back up the following information. Local logon attemptsDomain logon attemptsSecurity update installation attempts You need to specify the appropriate log files to back up.
Which files should you specify?
You need to improve the performance of Active Directory printer searches in the four branch offices
Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers. In the branch offices, searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices. What should you do?
You need to provide all client computers with Internet access
Your company has 250 client computers connected to the office LAN. The company has a pool of five public IP addresses. All client computers have dynamically assigned IP addresses. You need to provide all client computers with Internet access.
What should you use?