Microsoft Identity with Windows Server 2016

Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains two sites. Each site contains two domain controllers. You need to configure all the domain controllers in both the forests as global catalog servers. Which snap-in should you use?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2. You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com. You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1. What should you do?

Your network contains an Active Directory forest named contoso.com. Your company plans to hire 500 temporary employees for a project that will last 90 days. You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees. You need to prevent the new users from accessing any of the resources in the domain after 90 days. What should you do?

Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2. The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2. You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort. What should you do before you raise the domain functional level?

Your network contains an Active Directory domain. You have a user account that is a member of the Domain Admins group. You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names. A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number. Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops. You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and the computer accounts of the laptops are in the correct OUs. Solution: You script the creation of files domain join, and then you give the files to Tech1. You instruct Tech1 to sign in to each laptop, and then to run djoin.exe. Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. You need to ensure that the Administrators group on each computer in the domain always contains Contoso\Domain Admins. What should you do?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2. You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in the contoso.com. You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1. What should you do?

Your network contains an Active Directory forest named contoso.com. A partner company has a forest named fabrikam.com. Each forest contains one domain. You need to provide access for a group named Research in fabrikam.com to resources in contoso.com. The solution must use the principle of least privilege. What should you do?

Your network contains an Active Directory forest. The forest functional level is Windows Server 2016. You have a failover cluster named Cluster1. Cluster1 has two nodes named Server1 and Server2. All the optional features in Active Directory are enabled. A junior administrator accidentally deletes the computer object named Cluster1. You discover that Cluster1 is offline. You need to restore the operation of Cluster1 in the least amount of time possible. What should you do?

Your company has two offices. The offices are located in Montreal and Seattle. The network contains an Active Directory forest named contoso.com. The forest contains three domain controllers configured as shown in the following table. The company physically relocates Server2 from the Montreal office to the Seattle office. You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authenticates users who sign in to the computers in the Seattle office. You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations. What should you do?