You are the network administrator for your company. The network consists of a single Active Directory
domain. The domain contains an organizational unit (OU) named Research. All users who have user
accounts in the Research OU use portable computers that run Windows XP Professional. You create a
Group Policy object (GPO) named PowerManagement and link it to the Research OU. You configure the
PowerManagement GPO to enable the Prompt for password on resume from hibernate/suspend policy. A
user named Marie has a user account in the Research OU. Marie reports that she is not prompted for a
password when her computer resumes from hibernation. You need to ensure that Marie immediately has
password protection for her portable computer when resuming from hibernation mode. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. The company decides to make five Windows XP
Professional computers available in a public area for use by visitors. These computers are to be used only
for browsing public Web sites. A Web browser is the only application that will be run on these computers.
You make these computers members of the Active Directory domain. You create a new organizational unit
(OU) named Restricted Computers and place the five computer accounts in this OU. You configure these
computers to automatically log on a user named Restricted User each time the computer is started. The
Restricted User account does not have administrative rights on the computer or on the domain. You need to
configure the five computers so that they can access public Web sites but cannot run other applications.
The restrictions must not affect other users or computers on the network. What are two possible ways to
achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You are the network administrator for your company. The network consists of a single Active Directory forest. The forest consists of 19 Active Directory domains. Fifteen of the domains contain Windows Server 2003 domain controllers. The functional level of all the domains is Windows 2000 native. The network also consists of a single Microsoft Exchange 2000 Server organization. You need to create groups that can be used only to send e-mail messages to user accounts throughout the company. You want to achieve this goal by using the minimum amount of replication traffic and minimizing the size of the Active Directory database. You need to create a plan for creating e-mail groups for your company. What should you do?

Your company has a single Active Directory directory service forest. All user accounts are located in the Users container. You need to create a number of organizational units (OUs) that will be used to store user accounts. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You are the network administrator for your company. Your network consists of a single Active Directory domain. Three security groups named Accountants, Processors, and Management are located in an organizational unit (OU) named Accounting. All of the user accounts that belong to these three groups are also in the Accounting OU. You create a Group Policy object (GPO) and link it to the Accounting OU. You configure the GPO to disable the display options under the User Configuration section of the GPO. You need to achieve the following goals: You need to ensure that the GPO applies to all user accounts that are members of the Processors group. You need to prevent the GPO from applying to any user account that is a member of the Accountants group. You need to prevent the GPO from applying to any user account that is a member of the Management group, unless the user account is also a member of the Processors group.What should you do?

Your network consists of Windows XP computers in a single Active Directory directory service domain. All computers are located in a single Active Directory site. You need to design and deploy a new Group Policy object (GPO) that automatically installs a custom application on computers. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

Your company plans to distribute an application to all of its client computers by using Group Policy. You save a file named setup.msi to a local folder on the domain controller. You assign the Authenticated Users group the Read and Read & Execute permissions for the folder. You create a new Group Policy object (GPO) and a new Computer Configuration software installation package, and you point the package to the setup.msi file in the local folder. You link the GPO to an organizational unit (OU) that contains a computer object for a test client computer. When you log on to the test client computer, you notice that the application is not installed. You need to ensure that the application is installed on the test computer. What should you do?

Your network consists of Windows XP computers. All computers are joined to a single Active Directory directory service domain and located in a single Active Directory site. You create a new Group Policy object (GPO) and link it to the site. The policy configures default screensaver settings. User accounts of users in the research department are located in an organizational unit (OU) named Research. You need to allow users in the research department to configure a different screensaver setting on their computers. What should you do?

You have a single Active Directory directory service domain. User accounts are in an organizational unit (OU) named Employees. A Group Policy object (GPO) named Secure Employees is linked to the Employees OU. Member servers are in an OU named Servers. A GPO named Secure Member Servers is linked to the Servers OU. You need to ensure that when users attempt to log on to member servers with their Active Directory credentials, and the users incorrectly enter their password three times, the users are automatically locked out. What should you do?