You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. All client computers run Windows XP Professional and are membersof  the domain.
The domain has security settings that are applied that are applied the Default Domain Policy GPO. The current password policy shown in the Policy Exhibit.
A new user named Tess King logs on to the domain for the first time and is prompted to reset her password. Tess successfully sets a new password. Later the same day, she attempts to change her password. You view the properties of her account in Active Directory Users and Computers. The properties for Tess King's account are shown in the Account Properties exhibit.
You need to ensure that Tess can change her password.
What should you do?（）

You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. All domain controllers run Windows Server 2003.
Users who enter an invalid password more than twice in one day must be locked out.
You need to configure domain account policy settings to enforce this rule.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
A user named King will leave TestKing in one week. A replacement will be hired in one month.
The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder.
You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired.
What should you do?（）

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords.
You need to force all users in the Sales department to reset their passwords.
What should you do?（）

You are responsible for administering the Production OU. You are assigned the Allow - Full Control permission for the OU. All computer objects in the Production OU are administered by another administrator named Tom.
The Production OU contains the computer account for a Windows Server 2003 computer named Testking1. Tom submits a list of configuration settings that he wants to apply to Testking1 by means of a Group Policy object (GPO). A GPO that contains Tom's required settings is created in another OU by the domain administrator.
You only want to allow Tom to link existing GPOs to the Production OU. He must not have any more rights than he needs to perform the required tasks.
What should you do?（）

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
A new management directive states that users can log to the domain only during business hours. Users who remain logged on after business hours must be automatically disconnected from network resources. You need to enforce this directive by using the minimum amount of administrative effort.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.
You use a non-administrative user account named Joseph to log on to a client computer. You need to change the password for a domain user account named Sophia.
You open the Active Directory Users and Computers console. When you attempt to change Sophia's password, you receive the following error message: "Access is denied".
You need to remain logged on to the client computer as Joseph, and you need to be able to change Sophia's password.
What should you do?（）

You are the network administrator for TestKing. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows 2000. The NetBIOS names of the domains are TesKing1, TesKing2, TestKing3. The functional level of all three domains is Windows 2000
mixed. You manage resources in TesKing1.
A new file server is added to TesKing1. Users in all three domains need access to resources on the file server.
You need to create a group that will be used to grant access to the file server in TesKing1.
Which two actions should you perform? Each correct answer presents part of the solution. Select two.（）

You are the network administrator for TestKing.com. All user accounts and groups in the domain are in the container named Users.
Company naming conventions require that names of global groups begin with G_ and names of domain local groups begin with DL_. A domain local group named HRServices does not meet the requirements. The HRServices group has one global group member named G_HRUsers. The HRServices group is assigned to Allow - Full Control permission for a shared folder named HRFiles. The shard folder is located on a file server.
You need to rename the HRServices group to meet the naming convention
requirements. In addition, you need to ensure that user access to the HRFiles shared folder is not disrupted while you perform the procedure.
What are two possible ways to achieve this goal? （）(Each correct answer presents a cplete solution. Choose two.)

You are the network administrator for TestKing.com. All network servers run Windows Server 2003.
The network consists of 10 offices located across Europa. The OU structure consists of one top-level OU for each branch office. Each top-level OU contains eight or more child OUs, one for each department. User accounts are located in the appropriate departmental OU within the appropriate office OU.
For security purposes, you routinely disable user accounts for terminated employees. As part of an internal audit, you need to create a list of all disabled user accounts.
You need to generate the list of disabled user accounts as quickly as possible.
What are two possible ways to achieve this goal? （）(Each correct answer presents a complete solution. Choose two.)