Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
Users in the Sates OU frequently log on to client computers in the Engineering OU.
You need to meet the following requirements:
All of the user settings in the Group Policy objects (GPOs) linked to both the Sales OU and
the Engineering OU must be applied to sales users when they log on to client computers in
the Engineering OU.
Only the policy settings in the GPOs linked to the Sales OU must be applied to sales users
when they log on to client computers in the Sales OU.
Policy settings in the GPOs linked to the Sales OU must not be applied to users in the
Engineering OU.
What should you do?

You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?

Your network contains two Active Directory forests named contoso.com and fabrikam.com.
Each forest contains a single domain.
A two-way forest trust exists between the forests. Selective authentication is enabled on the
trust.
Contoso.com contains a group named Group 1.
Fabrikam.com contains a server named Server1.
You need to ensure that users in Group1 can access resources on Server1.
What should you modify?

Your network contains an Active Directory forest named contoso.com. The forest contains
two domains named contoso.com and child.contoso.com. The forest contains two sites
named Seattle and Denver. Both sites contain users, client computers, and domain
controllers from both domains.
The Seattle site contains the first domain controller deployed to the forest. The Seattle site
also contains the primary domain controller (PDC) emulator for both domains. All of the
domain controllers are configured as DNS servers. All DNS zones are replicated to all of the
domain controllers in the forest.
The users in the Denver site report that is takes a long time to log on to their client computer
when they use their user principal name (UPN). The users in the Seattle site do not
experience the same issue.
You need to reduce the amount of time it takes for the Denver users to log on to their client
computer by using their UPN.
What should you do?

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com.
You need to create one password policy for administrators and another password policy for
all other users.
Which tool should you use?

Your network contains an Active Directory forest. The forest contains one domain named
contoso.com.
You discover the following event in the Event log of domain controllers: “The request for a
new accountidentifier pool failed. The operation will be retried until the request succeeds.
The error is ” %1 “”
You need to ensure that the domain controllers can acquire new account-identifier pools
successfully.

What should you do?

Your network contains an Active Directory forest.
All users have a value set for the Department attribute.
From Active Directory Users and Computers, you search a domain for all users who have a
Department attribute value of Marketing. The search returns 50 users.
From Active Directory Users and Computers, you search the entire directory for all users
who have a Department attribute value of Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing
department returns all of the users who have the Marketing Department attribute.
What should you do?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 and GPO2 are
linked to the Sales OU and contain multiple settings.
You discover that GPO2 has a setting that conflicts with a setting in GPO1. When the
policies are applied, the setting in GPO2 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GPO2. The solution
must ensure that all non-conflicting settings in both GPOs are applied.

Your network contains an Active Directory domain. The domain is configured as shown in
the exhibit.

You have a Group Policy Object (GPO) linked to the domain.
You need to ensure that the settings in the GPO are not processed by user accounts or
computer accounts in the Finance organizational unit (OU). You must achieve this goal by
using the minimum amount of administrative effort.
What should you do?