Your network consists of a single Active Directory domain. The network includes a branch office
named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An
organizational unit (OU) named Branch1Servers contains the computer objects for the servers in
Branch1. A global group named Branch1admins contains the user accounts for the administrators.
Administrators maintain all member servers in Branch1. You need to recommend a solution that
allows the members of Branch1admins group to perform the following tasks on the Branch1
member servers.
• Stop and start services
• Change registry settings
What should you recommend?

Your network consists of a single Active Directory domain. The network includes a branch office
named Branch1. Branch1 contains a Read only Domain Controller (RODC) named Server1. A global
group named Branch1admins contains the user accounts for administrators. Administrators manage
the client computers and servers in Branch1. You need to recommend a solution for delegating
control of Server1. Your solution must meet the following requirements:
• Allow the members of the Branch1admins group to administer Server1 including, change
device drivers and install operating system updates by using Windows Update.
• Provide the Branch1admins group rights on Server1 only.
• Prevent Branch1admins group from modifying Active Directory objects.
What should you recommend?

Your network consists of a single Active Directory forest. The forest functional level is Windows
Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit (OU)
named Security. You need to give User1 administrative rights so that he can manage Group Policies
for the Security OU. You want to achieve this goal while meeting the following requirements:
• User1 must be able to create and configure Group Policies in na.contoso.com.
• User1 must be able to link Group Policies to the Security OU.
• User1 must be granted the least administrative rights necessary to achieve the goal.
What should you do?

Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch
office contains a domain controller and a file server. The DHCP Server server role is installed on the
branch office domain controllers. Each office has a branch office administrator. You need to delegate
the administration of DHCP to meet the following requirements:
• Allow branch office administrators to manage DHCP scopes for their own office
• Prevent the branch office administrators from managing DHCP scopes in other offices
• Minimize administrative effort
What should you do?

Your company has a single Active Directory domain. You have 30 database servers that run Windows
Server 2008 R2. The computer accounts for the database servers are stored in an organizational unit
(OU) named Data. The user accounts for the database administrators are stored in an OU named
Admin. The database administrators are members of a global group named D_Admins. You must
allow the database administrators to perform administrative tasks on the database servers. You
must prevent the database administrators from performing administrative tasks on other servers.
What should you do?

Your network consists of a single Active Directory forest that contains a root domain and two child
domains. All servers run Windows Server 2008 R2. A corporate policy has the following
requirements:
• All local guest accounts must be renamed and disabled.
• All local administrator accounts must be renamed.
• You need to recommend a solution that meets the requirements of the corporate policy.
What should you recommend?

Your network consists of a single Active Directory domain. The functional level of the domain is
Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2. A corporate policy
requires that the users from the research department have higher levels of account and password
security than other users in the domain. You need to recommend a solution that meets the
requirements of the corporate policy. Your solution must minimize hardware and software costs.
What should you recommend?

Your network consists of a single Active Directory domain. The functional level of the domain is
Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy
requires complex passwords for user accounts that have administrator privileges. You need to design
a strategy that meets the following requirements:
• Ensures that administrators use complex passwords
• Minimizes the number of servers required to support the solution
What should you include in your design?

Your network consists of a single Active Directory domain. The domain contains three organizational
units (OUs) named Test, Application, and Database. You need to redesign the layout of the OUs to
support the following requirements:
– Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers
located in the
Applications OU
– Minimize the number of GPOs
– Minimize the number of Ous
What should you include in your design?

Your network consists of a single Active Directory domain. The relevant portion of the Active
Directory domain is configured as shown in the following diagram.

The Staff organizational unit (OU) contains all user accounts except for the managers’ user accounts.
The Managers OU contains the managers’ user accounts and the following global groups:
• Sales
• Finance
• Engineering
You create a new Group Policy object (GPO) named GPO1, and then link it to the Employees OU.
Users from the Engineering global group report that they are unable to access the Run command on
the Start menu. You discover that the GPO1 settings are causing the issue. You need to ensure that
the users from the Engineering global group are able to access the Run command on the Start menu.
What should you do?