You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects (GPOs) in the corp.contoso.com domain. What should you do?

You have a single Active Directory directory service domain. Users work in one of four departments. You are planning to implement a Standard Desktop policy. You will test this Standard Desktop policy on the users in the HR department prior to applying it to the rest of the companys users. You create a Group Policy object (GPO) named Standard Desktop and apply the desired settings to the GPO. You need to ensure that the Standard Desktop GPO is applied only to users in the HR global security group. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. Except for IT staff, users are not local administrators on client computers. The company obtains a new application for order processing. This application must be installed on each client computer. The application is contained in an .msi file. You copy the .msi file to a shared folder on a file server. You assign the
Authenticated Users group the Allow – Read permission for the shared folder. To deploy the application, you instruct users to double-click the .msi file in the shared folder. When users attempt to install the application, they receive an error message, and setup fails. You need to configure the network so that the application can be installed successfully. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. The domain functional level of each domain is set to Windows 2000 mixed. You need to enable users from both domains to access resources in both domains. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. The sales department uses Windows Vista client computers. The finance department uses Windows XP client computers. All client computers are in the Clients organizational unit (OU). A software restriction policy is linked to the Clients OU. You are planning a new certificate autoenrollment Group Policy object (GPO) named AutoEnroll for the sales department client computers. You need to ensure that the AutoEnroll GPO applies to only the Windows Vista client computers. What should you do?

You have a single Active Directory directory service domain. Web servers are located in an organizational unit (OU) named Web. You need to enforce strong passwords for administrators who log on to domain controllers. You must enforce account lockout policy for administrators who log on locally to Web servers. What should you do?

Your company has a single Active Directory directory service forest with four domains. The domains are named contoso.com, corp.contoso.com, fabrikam.com, and corp.fabrikam.com. Users in the corp.contoso.com domain frequently access resources that are located in the corp.fabrikam.com domain. You need to improve user logon times from the corp.contoso.com domain to the corp.fabrikam.com domain. What should you do?

You have a single Active Directory directory service domain. Your company has a main office and multiple branch offices configured in a hub-and-spoke network topology. Each office has an Active Directory site. You need to ensure replication to all sites while preventing direct replication between branch offices. What should you do?