You have a Windows Server 2003 Active Directory directory service environment with an organizational unit (OU) named Corp. An OU named HR exists under the Corp OU. several Group Policy objects (GPOs) are currently linked to the HR OU. You need to link a new GPO to the Corp OU, and you must ensure that the new GPO is not applied to users in the HR OU. What should you do?

You have a Windows Server 2003 Active Directory directory service environment. Group Policy objects (GPOs) are linked to parent organizational units (OUs), and user and computer objects are located in child OUs. When users log on to their client computers, Folder Redirection policies are applied as expected. However, when users log on to a kiosk computer, a different Folder Redirection setting is applied. You need to ensure that users receive the same Folder Redirection policy regardless of which
computer they log on to. What should you do?

Your company has a main office and 30 branch offices. You are planning the implementation of Active Directory directory service. You need to implement a solution that allows local administrators in the branch offices to administer user accounts in their own locations while preventing the administrators from administering any other resources in their location. You must ensure that administrators in the main office have the ability to administer all user accounts, in all locations. Main office administrators must not have the ability to edit the contents of the default Users container. What should you do?

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain. What should you do?

You have a single Active Directory directory service domain. You are preparing to create a child domain. Your user account is in a global security group named Server Administrators. The Server Administrators group is in the local Administrators group on all servers. You need to install Active Directory on a server named Server1 to create the new child domain. What should you do?

You have a single Active Directory directory service domain. There is a branch office that connects to the main office through a low-bandwidth WAN link. The first domain controller is named DC1 and is located in the main office. The branch office has a single server named Server1. Server1 runs Windows Server 2003. You are preparing to install Active Directory on Server1. You back up the system state of DC1, and you send the backup to the administrator at the branch office. You need to make Server1 an
additional domain controller in your domain, while minimizing the bandwidth usage between the two offices. What should you do?

You are a network administrator for Litware, Inc. The network consists of a single Active Directory forest that contains two domains named litwareinc.com and dev. litwareinc.com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Litware, Inc., acquires a company named Graphic Design Institute. The Graphic Design Institute network consists of a single Active Directory forest that contains a single domain named graphicdesigninstitute. com. All domain controllers run Windows Server 2003. The functional level of the forest is Windows Server 2003. Users in the litwareinc.com domain require access to file and print resources stored on a computer named server1.graphicdesigninstitute.com. Users in the graphicdesigninstitute.com domain require access to all computers in the litwareinc.com forest. You must provide administrators with the ability to grant users access to the required resources. What should you do?

You are the network administrator for your company. Your network consists of a single Active Directory domain. All the user accounts, groups, and application servers of the human resources (HR) department are located in an organizational unit (OU) named HR. The managers in the HR department need access to the application servers to perform administrative tasks. A local group named HRManagers exists on each application server. The HRManagers local groups supply the permissions that the HR managers require. For security reasons, the company wants user accounts for managers in the HR department to be the only members of the HRManagers groups. You need to ensure that membership of the HRManagers group on each application server is as secure as possible. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. You have two physical locations, which correspond to two Active Directory sites. A domain controller is deployed to each location. A high-speed WAN link connects the two sites. Network utilization is low. Administrators create and edit Group Policy objects (GPOs) to configure security settings, login scripts, roaming profiles, and software installation. You need to ensure that all Group Policy processing continues in the event of a local domain controller outage. What should you do?