You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains an organizational unit (OU) named Sales. You create three Group Policy objects (GPOs) that have four configuration settings, as shown in the following table. The ScreenSaver GPO has the No Override setting enabled. The Sales OU has the Block Policy inheritance setting enabled. The priority for GPOs linked to the Sales OU specifies first priority for the Display and Wallpaper GPO and second priority for the Wallpaper GPO. For user accounts in the Sales OU, you want the Screen Saver tab to be hidden and the desktop wallpaper to be Autumn.jpg. You log on to a test computer by using a user account from the Sales OU, but you do not receive the settings you wanted. You need to configure the settings to hide the Screen Saver tab and set the desktop wallpaper to Autumn.jpg for the user accounts in the Sales OU. You want to avoid affecting user accounts in other OUs. What should you do?

You have a single Active Directory directory service domain with Windows XP client computers. Some users receive their DNS suffix search orders by using DHCP, and some users configure their DNS suffix search orders manually. You link a new Group Policy object (GPO) to the domain to specify a DNS suffix search order for client computers. Some users report that they are not receiving the new DNS suffix search order from the GPO. You need to ensure that all users receive the DNS suffix search order from the GPO. What should you do?

You have a single Active Directory directory service domain. User accounts and computer accounts in the finance department are located in an organizational unit (OU) named Finance. The users in the finance department use local databases that are saved to either the My Documents folder or to the users desktop. The finance users each have a primary client computer, but they frequently log on to a secondary client computer. Users report that the databases that they use when they are logged on to their primary client computer are not available when they log on to their secondary client computer. You need to ensure that the finance users have access to their databases regardless of which client computer they log on to. Logon times and logoff times must not increase as a result of this change. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain with two sites. The two sites are named Site1 and Site2. All servers run Windows Server 2003. The company has two offices, and each office is configured as one of the sites. A 256-Kbps leased line connects the two offices. In addition, a site link connects the two sites. The site link is configured to replicate during off-peak hours. There are domain controllers in both sites. Site1 contains all of the operations master role holders. You plan to create Group Policy objects (GPOs) for each site. Some GPOs will be used to resolve potential support issues for a specific site, and so you need to minimize any delay in the propagation of GPOs. You need to ensure that GPOs are applied to users in the appropriate site with minimal delay. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All user accounts for users in the engineering department are located in an organizational unit (OU) named Engineering. These users’ client computers are all located in an OU named EngineeringWorkstations, which is a child OU if the Engineering OU. All users in the engineering department are members of a global group named Engineers. You create a Group Policy object (GPO) that assigns a software installation package to users in the Engineering OU. To comply with the licensing requirements for the application, the application must be uninstalled from a user’s computer when that user is moved out of the Engineering OU. A user named Francesca is transferred out of the engineering department. The user account for Francesca is moved into an OU named Research. Francesca reports that the application is still installed on her computer. You must ensure that the application is automatically uninstalled from Francesca’s computer. The application must remain on the computers of all users who are still in the Engineering OU. What should you do?

You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The functional level
of the domain is Windows Server 2003. The organizational unit (OU) structure is shown in the exhibit.

Your company uses an X.500 directory service enabled product to support a sales and marketing application. The application is used only by users in the sales department and the marketing department. The application uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active Directory for all Sales and Marketing users. These users are instructed to log on by using their InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product. All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company. Mikhail is responsible for managing the objects for users who require access to the X.500 directory service enabled product. You need to configure Active Directory to allow Mikhail to perform his responsibilities. Which action or actions should you take? (Choose all that apply.)

You have a single Active Directory directory service domain. You create organizational units (OUs) named Corporate and Support. You move the corporate user and computer accounts into the Corporate OU. You move the accounts of computers in the support department into the Support OU. You need to ensure that users have one screensaver while using computers that are in the Corporate OU, and a separate screensaver while using computers that are in the Support OU. What should you do?

You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings. What should you do?

Your company has a single Active Directory directory service forest with multiple domains. The company has a main office with 1,000 users and a single branch office with 500 users. Each office is a separate Active Directory site. The main office Active Directory site has two domain controllers with Global Catalog services. Company employees must be able to work in both offices. You need to plan the placement and configuration of domain controllers. What should you do?

Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship. What should you do?