You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
Terminal Services is installed on a member server named Terminal1 with default settings.
Users in the editing department are members of a group named Editors. When these users try to make a Terminal Services connection to Terminal1, they receive the following error message: "The local policy of this system does not permit you to logon interactively".
You need to enable members of the Editors group to establish Terminal Services sessions on Terminal1.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows XP Professional, and
the rest run Windows NT 4.0 Workstation.
TestKing includes departments for accounting, design, marketing, and sales. Each department has a corresponding organizational unit (OU).
A member server named Testking1 can be accessed only by user accounts in the Accounting, Design, Marketing, and Sales OUs. You install Terminal Server on Testking1. Then you install four new applications on Testking1. Each application is intended for users in only one of the four departments.
You need to ensure that each application can be accessed only by users in the appropriate department. You need to achieve this goal by using the minimum amount of administrative effort.
What should you do?（）

You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A single server running Terminal Server is available to
remote users.
Your help desk staff is responsible for monitoring user activity on the terminal server. The staff is also responsible for sending messages to users about new programs and about modifications to the terminal server. A company developer writes a script that will log the relevant user information in a file and provide
pop-up messages as needed.
You need to ensure that the script runs every time a user logs on to the terminal server.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. Half of the client computers run Windows XP Professional,
and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on three member servers named TestKing1, TestKing2,and TestKing3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem. You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy Object (GPO) to the Terminal Server OU.
Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once.
You need to improve performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware.
What should you do?（）

You are the network administrator for Your network consists of two
Active Directory domains. Each department has its own organizational unit (OU)
for departmental user accounts. Each OU has a separate Group Policy object
(GPO)
A single terminal server named TestKingTerm1 is reserved for remote users. In
addition, several departments have their own terminal servers for departmental use.
Your help desk reports that user sessions on TestKingTerm1 remain connected even
if the sessions are inactive for days. Users in the accounting department report slow
response times on their terminal server.
You need to ensure that users of TestKingTerm1 are automatically logged off when
their sessions are inactive for more than two hours. Your solution must not affect
users of any other terminal servers.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named A Windows Server 2003 computer named TestKing3 is configured as a member server in your domain.
You install Terminal Services on TestKing3. You also install several legacy applications on TestKing3. Users report that they cannot run many of the legacy applications on TestKing3 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications.
You need to ensure that users can run the legacy applications on TestKing3 while they are connected through Terminal Services.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named The functional level of the domain is Windows Server 2003.
You install Terminal Services on all domain controllers. However, your technical support specialists report that they cannot use Terminal Services to access any domain controllers.
Which action or actions should you perform to solve this problem? （）(Choose all that apply)

You are a network administrator for The network consists of a single Active Directory domain named.
The domain contains two Windows Server 2003 terminal servers that host applications that are used by company employees. An organization unit (OU) named TerminalServers contains only the computer accounts for these two Terminal servers. A Group Policy object (GPO) named TSPolicy is linked to the TerminalServers OU, and you have been granted the right to modify the GPO.
Users should use the terminal servers to run only authorized applications. A custom financial application suite is currently the only allowed application. The financial application suite is installed in the folder C:\Program Files\MT Apps. The financial application suite contains many executable files.
Users must also be able to use Internet Explorer to access a browser-based application on the company intranet. The browser-based application makes extensive use of unsigned ActiveX components.
The financial application suite and the browser-based application are frequently updates with patches or new versions.
You need to configure the terminal servers to prevent users from running unauthorized applications. You plan to configure software restriction policies in the TSPolicy GPO. To reduce administrative overhead, you want to create a solution that can be implemented once, without requiring constant reconfiguration.
Which three actions should you perform to configure software restriction polices?（）
(Each correct answer presents part of the solution. Choose three)

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
Three member servers are configured as terminal servers. All three host confidential data. Currently, all network users are full-time employees, and all network users are allowed to log on to the terminal servers.
TestKing hires 25 temporary employees. You create a user account for each one.
You need to ensure that only full-time employees are allowed to log on to the terminal servers.
What should you do?（）

You are the network administrator for. The network consists of a single Active Directory forest that contains two domains. You have not modified the default Active Directory site configurations. The functional level of both domains is Windows 2000 native. Servers run either Windows Server 2003 or Windows 2000 Server.
TestKing's internal domain is named testking.local. Testking's external domain is named . The external domain is accessed only by TestKing's business partners.
You install a Windows Server 2003 computer named Testking7 in the domain. You install and configure Terminal Services on Testking7. Testking7 is configured as a member server in the domain. You install a
secure database application on Testking7 that will be accessed by TestKing's business partnersA few months later, users report that they can no longer establish Terminal Services session to Testking7. You verify that only the default ports for HTTP, HTTPS, and Terminal Services on your firewall are open to the Internet.
You need to ensure that TestKing's business partners can establish Terminal Services sessions to Testking7.
What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)