You are the domain administrator for your company's Active Directory domain. All servers run Windows Server 2003.
The information technology (IT) department recently installed Software Update Services (SUS) to manage security updates. The server that runs SUS is configured to synchronize automatically every day at 7:00 A.M.
New critical security updates were released today at 9:00 A.M.
You need to manually update the SUS server.
What should you do?
You are the domain administrator for your company's Active Directory domain. All client computers run Windows 2000 Professional.
You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in a new organizational unit (OU) named W2K3Servers.
Anne is another network administrator.
You need to configure the appropriate permissions to allow Anne to manage the new servers by using Terminal
Services from her client computer.
You need to assign Anne only the permissions she needs to perform her job.
What should you do?
You are the network administrator for your company. All network servers run Windows Server 2003.
You install and configure Software Update Services (SUS) on a server named Server1. You configure the following settings:
- Do not use a proxy server for Internet access.
- Synchronize directly from the Microsoft Windows Update servers.
- Automatically approve new versions of previously approved updates.
- Save updates in a local folder.
You back up the SUS configuration and schedule a daily synchronization procedure for Server1.
Later the same day, Server1 fails. You use the original names and locations to restore Windows Server 2003, IIS 6.0, and SUS.
Now you need to fully restore the SUS configuration, without overwriting any other data.
What should you do?
You are the network administrator for your company. The company includes two divisions: Contoso, Ltd. and
Fabrikam, Inc. The two divisions are in separate locations. The two locations are connected by a WAN
connection.
The network consists of two single-domain Active Directory forests. The domain names are contoso.com and
fabrikam.com. All domain controllers run Windows Server 2003. All domain controllers are configured as DNS
servers. All computers in each domain are configured to use the local domain controllers for DNS.
Users in the contoso.com domain frequently need to access several Web servers in the fabrikam.com domain.
However, when the users attempt to connect, they receive an error message stating that the servers cannot be
located.
You need to ensure that users in the contoso.com domain can access the Web servers in the fabrikam.com
domain. Your solution must have a minimal effect on the current name resolution and should require minimal
administrative effort to maintain.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose
two.)
You are the network administrator for your company. The network consists of a single Active Directory domain.
All servers run Windows Server 2003. All user accounts are members of the Domain Users group.
You manage a server that is a member of the domain. Some administration tasks must be performed while you are logged on to the server. A new written security policy states that only specified users must be able to
access the server by using Terminal Services. The written security policy also states that only administrators on the local server must be able to log on locally to the server.
The settings for the server are shown in the following table.
You are a member of the Domain Admins global group. You attempt to perform maintenance tasks on the server, but you receive an error message stating that the local policy of the computer is preventing you from logging on locally.
You need to ensure that you can perform the maintenance tasks that are required for the server. You also need to meet the requirements of the written security policy.
What should you do?
You are the network administrator for your company. The network consists of a single Active Directory domain.
The functional level of the domain is Windows Server 2003.
Some user accounts have expiring passwords and some do not.
You need to identify all user accounts that do not have expiring passwords. You need to modify the password property to allow the passwords on these accounts to expire. You must complete this task by using the minimum amount of administrative effort.
First, you create a saved query to obtain a list of all user accounts that do not have expiring passwords.
What should you do next?
You are the network administrator for your company. The company's main office is in Chicago, and it has a branch office in Detroit. The network consists of a single Active Directory domain. Each office is Configured as
an Active Directory site. The two offices are connected by a 128-Kbps connection. All domain controllers run
Windows Server 2003. All client computers run Windows XP Professional. All network administrators are located in Chicago. Universal group membership caching is enabled.
The server roles and IP addresses for each site are shown in the following table.
The network connection between Chicago and Detroit intermittently fails. Only the client computers in Detroit have NetBIOS enabled. All client computers in both sites are configured using DHCP.
The significant DHCP scope options for Detroit are shown in the following table.
You create a user account for a new employee in Detroit. The user reports that she cannot log on to the domain. You confirm that you can log on by using your account and then by using the user's account. You also confirm that all other users in Detroit can log on.
You need to ensure that the user can authenticate to the domain.
What should you do?
You are the network administrator for Coho Vineyard. The network consists of a single Active Directory domain named cohovineyard.com. All servers run Windows Server 2003. All client computers run either Windows 2000
Professional or Windows XP Professional.
Coho Vineyard has offices in San Francisco, Los Angeles, and London. Each office contains three servers that are configured as domain controllers and run the DNS Server service. All client computers and servers are
configured to use a local DNS server as the primary DNS server.
You create a new primary zone named east.cohovineyard.com on a server in London named DC1.
You need to configure DNS servers in San Francisco and Los Angeles to resolve queries for resources in east.cohovineyard.com. You must ensure that client computers can update DNS data on the local DNS servers.
You also need to minimize WAN network traffic relating to DNS queries for resources in east.cohovineyard.com.
What should you do?
You are the administrator of a Windows Server 2003 computer named Server1. Server1 is a domain member server that has the DNS service installed.
Server1 is configured with two network interfaces named NIC1 and NIC2. Routing is not enabled between the two network interfaces. NIC1 and NIC2 are configured as shown in the following table.
Resources on the preproduction network segment use the same fully qualified domain names (FQDNs) as resources in the production network. The TCP/IP properties on client computers in the preproduction
environment are controlled by individual testers.
You need to ensure that the users in the preproduction environment cannot resolve FQDNs from the production network. You want to accomplish this goal by using the DNS console on Server1.
What should you do?
You are the network administrator for the Boston office of Woodgrove Bank. The company network consists of a single Active Directory domain named woodgrovebank.com.
The Boston office contains 15 file servers that contain confidential files. All the file servers run either Windows
Server 2003 or Windows 2000 Server. All the file servers are in the BostonFilePrint organizational unit (OU).
The company's security department sets a rule that specifies the size and retention settings for the Security event log of all file servers. The rule also specifies that local administrators on servers cannot override the
changes you make to the settings for the Security event log.
You need to define a method to modify the Security event log settings on each file server in the Boston office in order to meet the stated requirements.
What should you do?