You have a Windows Server 2003 Active Directory directory service forest with two domains named contoso.com and corp.contoso.com, and two sites named Site1 and Site2. Site1 has two domain controllers for the contoso.com domain. Site2 has two domain controllers for the corp.contoso.com domain. Replication traffic is creating network congestion. Your environment contains a large number of universal security groups. You examine the universal groups and find that they contain global security groups and individual user accounts from both domains. The universal group memberships change frequently. You need to reduce the Active Directory replication traffic. You must maintain the ability to assign groups from one domain access to resources in the other domain. What should you do?

Your network consists of Windows XP and Windows Vista computers joined to an Active Directory directory service domain. All users and computers are located in a single organizational unit (OU). You create a new Group Policy object (GPO) and link it to the OU. The new GPO settings are not being applied to the Windows Vista computers. You need to identify which policy settings are in effect on all computers. What are two possible tools that you can use to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You deploy an application by using a Group Policy object (GPO) that publishes an .msi file. Users report some instabilities in the application that cause data loss. The software vendor releases a patch that fixes the problem. The patch is released as an .msp file. You need to ensure that users do not lose data when running the application. Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)

You have a single Active Directory directory service domain. All client computers run Windows XP. You configure security settings for the client computers in a new Group Policy object (GPO), and you link the GPO to the domain. The security settings are not being applied to one of the client computers. You need to find out why the security settings are not being applied to the client computer. On the client computer, what should you do?

You have a single Active Directory directory service domain. You configure security settings for your client computers in a new Group Policy object (GPO), and you link the GPO to an organizational unit (OU). A new computer is moved to the OU. The Group Policy settings are not being applied to the new computer. You need to find out why the Group Policy settings are not being applied to the new computer. What should you do?

You have a Windows Server 2003 Active Directory directory service environment that includes Windows XP client computers. You publish an application by using a Group Policy object (GPO). You need to immediately update the Windows XP client computers so that you can install the application. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. All client computers run Windows XP Professional. All user accounts for the sales department users are located in an organizational unit (OU) named Sales. The client computers are located in the default Computers container. All users in the sales department require that a sales application be installed on their client computers. You create a new Group Policy object (GPO). You create a software installation package and use the GPO to assign the package to computers. You link the GPO to the Sales OU. Users in the sales department report that the application is not installed on any client computers. You need to install the application on all client computers in the sales department. You need to ensure that the application is installed only on the client computers used by users in the sales department. What should you do?

Your company has a single Active Directory directory service forest with multiple domains. Several user principal name (UPN) suffixes exist in the directory. You need to review and modify the UPN suffixes. Which tool should you use?

You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. One of your domain controllers fails. You are unable to restart the domain controller in Directory Services Restore Mode. You need to restore the domain controller without losing any Active Directory changes that were made after the domain controller failed. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

You have a single Active Directory directory service domain with three domain controllers named DC1, DC2, and DC3. DC3 experiences a hardware failure and shuts down unexpectedly. You decide to not rebuild DC3 but to build a new server to replace DC3. You need to ensure that DC3 is removed from the Active Directory domain naming context. What should you do?