You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. Except for IT staff, users are not local administrators on client computers. The company obtains a new application for order processing. This application must be installed on each client computer. The application is contained in an .msi file. You copy the .msi file to a shared folder on a file server. You assign the
Authenticated Users group the Allow – Read permission for the shared folder. To deploy the application, you instruct users to double-click the .msi file in the shared folder. When users attempt to install the application, they receive an error message, and setup fails. You need to configure the network so that the application can be installed successfully. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You have a single Active Directory directory service domain. You create a new Group Policy object (GPO) to enforce several Internet Explorer settings for users. Several users change their local Internet Explorer settings from the settings that are defined in the GPO. You need to ensure that if users locally change the Internet Explorer settings, the settings are changed back to those defined in the GPO. What should you do?

You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. The domain functional level of each domain is set to Windows 2000 mixed. You need to enable users from both domains to access resources in both domains. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. The sales department uses Windows Vista client computers. The finance department uses Windows XP client computers. All client computers are in the Clients organizational unit (OU). A software restriction policy is linked to the Clients OU. You are planning a new certificate autoenrollment Group Policy object (GPO) named AutoEnroll for the sales department client computers. You need to ensure that the AutoEnroll GPO applies to only the Windows Vista client computers. What should you do?

You have a single Active Directory directory service domain. Web servers are located in an organizational unit (OU) named Web. You need to enforce strong passwords for administrators who log on to domain controllers. You must enforce account lockout policy for administrators who log on locally to Web servers. What should you do?

Your company has a single Active Directory directory service forest with four domains. The domains are named contoso.com, corp.contoso.com, fabrikam.com, and corp.fabrikam.com. Users in the corp.contoso.com domain frequently access resources that are located in the corp.fabrikam.com domain. You need to improve user logon times from the corp.contoso.com domain to the corp.fabrikam.com domain. What should you do?

You are the network administrator for Northwind Traders. The network consists of a single Active Directory forest. The functional level of the forest is Windows Server 2003. The forest consists of a forest root domain named northwindtraders.com and a child domain named child1.northwindtraders.com. The child1.northwindtraders.com domain contains all of the user accounts for the network. Your company acquires a company named Contoso, Ltd. The Contoso, Ltd., network consists of a single Active Directory
forest that contains a forest root domain named contoso.com and a child domain named child1.contoso.com. All domain controllers run Windows 2000 Server. Both domains contain user accounts and resource servers. The domains and existing trust relationships are shown in the exhibit.

You need to create the minimum number of trust relationships required for the users in the child1.northwindtraders.com domain to access resources in both domains in the contoso.com forest. What should you do?

You have a single Active Directory directory service domain. Your company has a main office and multiple branch offices configured in a hub-and-spoke network topology. Each office has an Active Directory site. You need to ensure replication to all sites while preventing direct replication between branch offices. What should you do?

Your company has a single Active Directory directory service domain with several top-level organizational units (OUs). There is one OU for each of the major departments, and an OU named Network Security. All user accounts are placed into their respective department OUs. You create a group named Help Desk, and you place the user accounts for help desk technicians into this group. You need to allow the help desk technicians to administer all user accounts except the accounts in the Network Security OU. Your solution must also allow the help desk technicians to administer accounts in future new top-level OUs without requiring the necessary rights to be manually assigned. What should you do?

Your company has a Windows Server 2003 environment with a single Active Directory directory service forest. The forest has multiple domains and two sites named Site1 and Site2. Site1 has six domain controllers. Two of the domain controllers are global catalog servers. Site2 has three domain controllers. The WAN link between Site1 and Site2 is slow. You are preparing the environment for an Active Directory application that requires universal group membership to make authorization decisions. Application servers will be located in Site1 and Site2. You need to prepare the Active Directory environment for the introduction of the Active Directory application. What should you do?