Your company has a main office in Chicago and a branch office in New York. The company has a single Active Directory directory service forest with four domains. Two of the domain controllers are described in the following table. An application has a server component and a client component. When the server component is installed, several schema classes and attributes are added. A user in the ne.sales.contoso.com domain installs the client component on his client computer. You then install the server component. Thirty minutes after you install the server component, the user attempts to run the client component, but receives an error message stating that the schema objects cannot be found. You verify that the objects are present on DC1. The users logon server is DC4. You need to ensure that the user can immediately run the client component. What should you do?

Exhibit
You are a network administrator for your company. The network consists of a single Active Directory forest
that contains one domain. The company has its main office and one branch office in San Francisco. The
company has additional branch offices in Chicago, New York, and Toronto. Administrators at the main office
are responsible for managing all objects in the domain. Administrators at each branch office are responsible
for managing user and computer objects for employees who work in the same branch office as the
administrator. Administrators for the San Francisco branch office are also responsible for managing user
and computer objects for employees who work in the main office. These users are managed as a single
unit. You want administrators to be authorized to make changes only to the objects for which they are
responsible. You need to plan an organizational unit (OU) structure that allows the delegation of required
permissions. You want to achieve this goal by using the minimum amount of administrative effort. Which OU
structure should you use?
Figure A
Figure B
Figure C
Figure D

You have two Active Directory directory service domains. Domain controllers are configured as shown in the following table. DC2 fails with an unrecoverable error. You need to move DC2s FSMO roles. What should you do?

You are the network administrator for Northwind Traders. The network consists of a single Active Directory forest. The functional level of the forest is Windows Server 2003. The forest consists of a forest root domain named northwindtraders.com and a child domain named child1.northwindtraders.com. The child1.northwindtraders.com domain contains all of the user accounts for the network. Your company acquires a company named Contoso, Ltd. The Contoso, Ltd., network consists of a single Active Directory
forest that contains a forest root domain named contoso.com and a child domain named child1.contoso.com. All domain controllers run Windows 2000 Server. Both domains contain user accounts and resource servers. The domains and existing trust relationships are shown in the exhibit. (Click the Exhibit button.) You need to create the minimum number of trust relationships required for the users in the child1.northwindtraders.com domain to access resources in both domains in the contoso.com forest. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory
domain. The company’s written domain administration policy requires that help desk employees must have
the ability to reset passwords. The help desk employees must be able to reset passwords for all user
accounts except for members of the Domain Admins global group and members of the Executives global
group. The help desk employees must not have any other administrative rights in the domain. All help desk
employees are members of the Help Desk global group. All members of the Domain Admins group are
located in an organizational unit (OU) named AdminsOU. All members of the Executives group are located
in an OU named ExecutiveOU. All other user accounts are located in an OU named EmployeesOU. The
relevant portion of the OU design for the domain is shown in the exhibit. (Click the Exhibit button.) You need
to configure the permissions for the help desk employees as defined by the written domain administration
policy. What should you do?

You are a network administrator for Fabrikam, Inc. The network consists of a single Active Directory domain named fabrikam.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. The company restricts all users so that they can use only authorized applications. All domain users are authorized to use the Microsoft Office suite of applications. Members of a security group named CRM Users are also authorized to use a customer relationship management (CRM) application. You configure Group Policy objects (GPOs) as shown in the exhibit. (Click the Exhibit button.) The Office Applications GPO has only the Microsoft Office applications listed as allowed applications. The CRM Application GPO has only the CRM application listed as an allowed application. The CRM Application GPO has security settings so that it applies only to members of the CRM Users security group. Users who are members of the CRM Users security group report that they cannot run the CRM application. You need to reconfigure the domain to meet the following requirements: All users must be able to run the Microsoft Office applications. Members of the CRM Users security group must be able to run the CRM application. All users must be prevented from running unauthorized software.Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)

You are the network administrator for your company. The company consists of two subsidiaries named
Contoso, Ltd., and Fabrikam, Inc. The network consists of a single Active Directory forest that contains
three domains. The domain and site configuration is shown in the exhibit. (Click the Exhibit button.) A
computer named DC1.asia.contoso.com is a domain controller in the asia.contoso.com domain. DC1.asia.
contoso.com is also a global catalog server and the preferred bridgehead server for AsiaSite. The Active
Directory database on on DC1.asia.contoso.com contains 1 GB of data. The Asia departments in the
company are implementing an Active Directory-enabled application. You expect size of the database on
DC1.asia.contoso.com to increase by 200 MB. Active Directory stops responding on DC1.asia.contoso.com.
You discover that the hard disk has less than 5 MB of space remaining. You need to configure DC1.asia.
contoso.com so that Active Directory can restart. You also need to configure the server so that additional
space is available on the hard disk for the additional data that will be added to the Active Directory database.
What should you do?

You are the network administrator for your company. The network structure is shown in the exhibit. (Click the Exhibit button.) The functional level of both forests is Windows Server 2003. All three domains are Active Directory domains. Domain3 contains a computer named Server1. A shared folder on Server1 is named Share1. Users in an organizational unit (OU) named Accounts in Domain2 need access to Share1. However, whenever the users in the Accounts OU attempt to connect to Share1, they receive an error message stating that access was denied. You need to ensure that users in the Accounts OU can connect to Share1. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional and are members of the domain. Only designated IT support staff have administrative rights on client computers. The company requires all client computers to run antivirus software. The company licenses an antivirus application that is installed on a file server named Server1. An unattended installation can be performed on each client computer by running the setup command from a shared folder on Server1. Several users report that when they attempt to install the antivirus application, they receive the following error message: "You do not have sufficient privileges on this computer to perform this action." You verify that the antivirus application is not installed on any client computers. You need to ensure that all client computers have the antivirus application installed. You want to accomplish this task by using the minimum amount of administrative effort. What should you do?

You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory domain named contoso.com. The domain contains three Windows Server 2003 domain controllers. A domain controller named DC2.contoso.com fails because of a hardware failure. You decide not to rebuild the domain controller. However, because several applications refer to DC2.contoso.com by its NetBIOS name, you need to provide a new domain controller that has the same name. You install a new Windows Server 2003 computer and name it DC2. You attempt to promote the server to a domain controller in the contoso.com domain. The promotion fails and you receive the following error message. You need to install a new domain controller named DC2 in the contoso.com domain. What should you do?