You have a single Active Directory directory service domain. All users in the IT department are placed into an organizational unit （OU） named IT Users. A Group Policy object （GPO） is linked to the IT Users OU. The GPO assigns a software installation package to install the Windows Server 2003 Administration Tools Pack. You select the Install this application at logon option in the software installation package. A user has been removed from the IT Users OU， but she still has the Windows Server Administration Tools Pack on her computer. You need to ensure that the Windows Server 2003 Administration Tools Pack is removed from a users computer when the user is moved from the IT Users OU.
What should you do？（）
A. Modify the software installation package to use the Published deployment method. Clear the Auto-install this application by file extension activation check box. Redeploy the software installation package.
B. Modify the software installation package to clear the Install this application at logon option. Redeploy the software installation package.
C. Modify the software installation package to select the Uninstall this application when it falls out of the scope of management option. Retain the software installation package in the GPO.
D. Modify the software installation package to select the Uninstall this application when it falls out of the scope of management option. Delete the software installation package from the GPO.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for Southridge Video. The network consists of a single Active Directory domain named southridgevideo.com. The domain contains one domain controller. All servers run Windows Server 2003. All client computers run Windows XP Professional. The company uses Group Policy objects （GPOs） to configure user and computer settings. The Active Directory database and the SYSVOL shared folder are stored on separate hard disks. The hard disk containing the SYSVOL folder fails. Some Group Policy settings are still applied， but new users do not receive the Group Policy settings. You replace the failed disk. You discover that there are no valid backups of the SYSVOL folder. You have a list of GUIDs and friendly names for each GPO. On the new disk， you create a new shared folder named SYSVOL in the same location as the previous SYSVOL folder. You need to configure the network so that the user and computer settings will be applied to all users.
Which three courses of action should you take？（）
A. In the SYSVOL folder， create a folder named southridgevideo.com. In the southridgevideo.com folder， create a folder named Policies.
B. In the SYSVOL folder， create a folder named System State. In the System State folder， create a folder named Policies.
C. In the Policies folder， create a folder for each GPO. Name the folders by using the friendly name of each GPO. In the folder for each GPO， create a folder named MACHINE and a folder named USER.
D. In the Policies folder， create a folder for each GPO. Name the folders by using the GUID of each GPO. In the folder for each GPO， create a folder named MACHINE and a folder named USER.
E. Use Active Directory Users and Computers to open each GPO. Close each GPO without changing any settings.
F. Use Active Directory Users and Computers to open each GPO. Change at least one setting in each GPO before closing it.
You have a single Active Directory directory service domain with three domain controllers named DC1， DC2， and DC3. All FSMO roles are held on DC1. All domain controllers are global catalog servers.
Several users are experiencing logon times that are longer than normal. All users are authenticating with
DC1 and DC3. The DC2 logs display error messages indicating that the Active Directory database partition is out of free space. You need to ensure that Active Directory is accessible on DC2. You add a 500-GB hard disk to DC2， back up the system state data， and restart DC2 in Directory Services Restore Mode.
What should you do next？（）
A. Use Windows Explorer to move ntds.dit to the new hard disk.
B. Use the Ntdsutil tool to move ntds.dit to the new hard disk.
C. Create a new application directory partition.
D. Perform an authoritative restore of Active Directory.
You are the network administrator for your company. The network consists of a single Active Directory domain. The company has an office in San Diego， which is configured as a single Active Directory site. The company has 500 users. The company opens a new office in Los Angeles， which employs 50 users. A T1 line connects both offices. You configure the Los Angeles office as a single site. You create a subnet object for the Los Angeles office.
In the Los Angeles office， you install and configure a server named DC1 as a domain controller and global catalog server. You configure the Los Angeles site to use DC1 and the Los Angeles subnet object. You configure a site link that connects the site in San Diego and the site in Los Angeles.
You need to ensure that client computers in Los Angeles connect to DC1 for authentication. You also need to ensure that changes to the domain are replicated as soon as possible.
What should you do？（）
A. Configure the interval for the site link to its minimum value.
B. Remove the Los Angeles site and move DC1 and the Los Angeles subnet object to the San Diego site.
C. Create an RPCbased connection object at each of the two sites.
D. Create a site link bridge between the two sites.
You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the forest is Windows Server 2003. Each domain
contains Windows Server 2003 file and print servers. All of the file and print server computer accounts are located in the default Computers container in each domain. There is a central operations department that is responsible for administering the file server computer accounts in all domains. There is a separate operations department for each domain that is responsible for administering the print server computer accounts in that domain. You need to delegate authority to create an environment to support your file and print server administration requirements. You need to create an organizational unit （OU） structure to support the delegation of authority requirements.
What should you do？（）
A. Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under the alpineskihouse.com domain.
B. Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under each domain.
C. Create a toplevel OU for file server computer accounts under each domain. Create a toplevel OU for print server computer accounts under each domain.
D. Create a toplevel OU for file server computer accounts under each domain. Create a child OU for print server computer accounts under each file server OU.
You are the network administrator for Blue Yonder Airlines. You plan to create an Active Directory domain named blueyonderairlines.com that will have a functional level of Windows Server 2003.
Your company has one main office and four branch offices， which are all located in one country. A central security department in the main office is responsible for creating and administering all user accounts in all offices. Each office has a local help desk department that is responsible for resetting passwordswithin the individual department’s office only.
All user accounts are located in the default Users container.
You need to create an organizational unit （OU） structure to support the delegation of authority requirements. You want to minimize the amount of administrative effort required to maintain the environment.
What should you do？（）
A. Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a separate child OU for each office under BlueYonderAirlines_Users. Move the user accounts of all employees in each office to the child OU for that office.
B. Create a toplevel OU named Main_Office under the blueyonderairlines.com domain. Move the user accounts of all users in the main office to the Main_Office OU.Create a separate child OU for each branch office under the Main_Office OU. Move the user accounts of all users in each branch office to the child OU for that office.
C. Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a child OU named Help_Desk under BlueYonderAirlines_Users. Move the user accounts of the help desk users to the Help_Desk OU.
D. Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a separate child OU under BlueYonderAirlines_Users for each office. Move the user accounts of the help desk users in each office to the child OU for that office.
You are the network administrator for your company. The network consists of a single Active Directory domain. User and group objects for the sales department are located in an organizational unit （OU） named Sales.
Peter and Mary are administrators for your company. Peter is responsible for managing Sales user objects. Mary is responsible for managing Sales group objects.
You need to delegate Peter and Mary control over only the objects for which they are responsible.
What should you do？（）
A. In the Sales OU， create two new OUs. Name one OU SalesUsers and place all user objects for the sales department in this OU. Name the other OU SalesGroups and place all group objects for the sales department in this OU. Grant Peter and Mary full control over the Sales OU.
B. On the Sales OU， grant Peter the right to manage user objects. On the Sales OU， grant Mary the right to manage group objects.
C. In the Sales OU， create a new OU. Name this OU SalesGroups. Place all Sales groups in theSalesGroups OU.Grant Peter the right to manage all objects in the Sales OU. Grant Mary the right to manage all objects in the SalesGroups OU.
D. On the Sales OU， deny Peter the right to manage group objects. On the Sales OU， deny Mary the right to manage user objects.
You are the network administrator for Fabrikam， Inc. Your network consists of a single Active Directory forest that contains one domain named fabrikam.com. The functional level of the forest is Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.，network consists of a single Active Directory forest that contains a root domain named contoso.com and a child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.
What should you do？（）
A. Create a twoway Windows Server 2003 external trust relationship between the fabrikam.com domain and the contoso.com domain.
B. Create a oneway Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.
C. Create a temporary twoway external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.
D. Create a temporary oneway external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.
ou are the network administrator for your company. The network consists of a single Active Directory forest that contains one domain. The functional level of the forest is Windows 2000， and the functional level of the domain is Windows 2000 mixed. The domain contains four domain controllers named DC1， DC2， DC3， and DC4. There are two sites in the forest. DC1 and DC2 are in one site. DC3 and DC4 are in the other site. DC1 fails. You need to wait until the following week to restore DC1. While connected to DC3， you perform a bulk import of user accounts and receive an error message stating that a number of the user accounts could not be created. You need to ensure that the user accounts can be created.
What should you do？（）
A. Seize the PDC emulator role to DC3.
B. Seize the relative ID （RID） master role to DC3.
C. Create a replication object to connect DC3 to DC2.
D. Raise the functional level of the domain and the functional level of the forest to Windows Server 2003.
You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles: schema master and domain naming master. DC1 in each child domain performs the following three operations master roles: PDC emulator master, relative ID (RID) master, and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a name change, the domain administrator of europe.contoso.com changes the Last name field of Nancy's useraccount from Buchanan to Anderson. The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan. You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group.
What should you do?（）
A. Transfer the PDC emulator master role from DC1 to DC2 in each domain.
B. Transfer the infrastructure master role from DC1 to DC2 in each domain.
C. Transfer the RID master role from DC1 to DC2 in each domain.
D. Transfer the schema master role from DC1 to DC2 in the contoso.com domain.
You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain.
What should you do?（）
A. Enable universal group membership caching in Site1.
B. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCFailures key to the registry on both domain controllers in Site1.
C. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCFailures key to the registry on all global catalog servers in the forest.
D. Raise the functional level of the forest to Windows Server 2003.
最新试题
You are the network administrator for Contoso， Ltd. The network consists of a single Active Directory forest that contains a single domain named contoso.com. You have a user account named CONTOSO\admin that is a member of the Domain Admins global group. You need to create a new child domain named NA.contoso.com in the forest. You install a stand-alone Windows Server 2003 computer named DC3. You use the Active Directory Installation Wizard to promote DC3 to a domain controller in the new domain. You choose to create a domain controller for a new child domain in an existing domain tree. You enter the user name and password for CONTOSO\admin. You choose contoso.com as the parent domain， and you type NA as the name of the child domain. You receive the error message shown in the exhibit. （Click the Exhibit button.） You need to be able to create the new child domain. What should you do？（）
You have two Active Directory directory service forests named contoso.com and fabrikam.com. All users log on to the contoso.com domain. All servers run Windows Server 2003 and are members of the fabrikam.com domain. You create a one-way forest trust in which fabrikam.com is trusting contoso.com. Forest-wide authentication is enabled. You need to provide only selected users with access to a server in the fabrikam.com domain.Which two actions should you perform？（）
You are the network administrator for Northwind Traders. The network consists of a single Active Directory forest that contains one root domain and one child domain. The forest also contains three separate sites， as shown in the Network Diagram exhibit. （Click the Exhibit button.） The network is not fully routed and there is no direct physical connection between Site1 and Site3. Site links are not bridged. You discover that the domain controllers for namerica.northwindtraders.com located in Site1 have additional accounts that are not on the domain controllers for namerica.northwindtraders.com located in Site3. You examine the directory service log in Event Viewer on a domain controller for namerica.northwindtraders.com. You discover the error message shown in the Error Message exhibit. （Click the Exhibit button.） You need to resolve the condition that is causing this error. What should you do？ （）
You have a single Active Directory directory service domain. All users in the IT department are placed into an organizational unit （OU） named IT Users. A Group Policy object （GPO） is linked to the IT Users OU. The GPO assigns a software installation package to install the Windows Server 2003 Administration Tools Pack. You select the Install this application at logon option in the software installation package. A user has been removed from the IT Users OU， but she still has the Windows Server Administration Tools Pack on her computer. You need to ensure that the Windows Server 2003 Administration Tools Pack is removed from a users computer when the user is moved from the IT Users OU. What should you do？（）
You are the network administrator for your company. Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You add eight servers for a new application. You create an organizational unit （OU） named Application to hold the servers and other resources for the application. Users and groups in the domain will need varied permissions on the application servers. The members of a global group named Server Access Team need to be able to grant access to the servers. The Server Access Team group does not need to be able to perform any other tasks on the servers. You need to allow the Server Access Team group to grant permissions for the application servers without granting the Server Access Team group unnecessary permissions. What should you do？（）
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional. All client computer accounts are located in an organizational unit （OU） named Workstation. A written company policy states that the Windows 2000 Professional computers must not use offline folders. You create a Group Policy object （GPO） to enforce this requirement. The settings in the GPO exist for both Windows 2000 Professional computers and Windows XP Professional computers. You need to configure the GPO to apply only to Windows 2000 Professional computers. What are two possible ways to achieve this goal？（）
Your company has a single Active Directory directory service forest. All user accounts are located in the Users container. You need to create a number of organizational units （OUs） that will be used to store user accounts. What are two possible ways to achieve this goal？（）
Your company has a single Active Directory directory service forest with multiple domains. The Schema FSMO role is held by one of the domain controllers in the forest root domain. The DomainThe safer ， easier way to help you pass any IT exams. Naming Master FSMO role is held by one of the domain controllers in a child domain. All domain controllers have Windows Server 2003 installed. You need to upgrade all domain controllers to Windows Server 2003 R2. Which two actions should you perform？（）
You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. All client computers run Windows Vista. The computers in the sales department are located in an organizational unit （OU） named Sales. You use a Default Domain Policy to configure company user and computer settings. You configure a software restriction policy for the domain. The policy prevents users from running software that is not approved. You need to allow computers in the Sales OU to run software that is not approved while maintaining other required settings. What should you do？（）
Your companys Windows Server 2003 environment consists of a single Active Directory directory service forest. The forest has multiple domains and three sites named Site1， Site2， and Site3. Site1 is the main office and has four domain controllers. Two of the domain controllers are global catalog servers. Site2 is a branch office with two domain controllers. Site3 is a branch office with a slow and unreliable WAN link and two domain controllers. You need to improve user logon performance for users in Site2 and Site3. Which two actions should you perform？（）