You are the network administrator for TestKing.com. The network consists of a single Activ

You are the network administrator for TestKing.com. All user accounts and groups in the domain are in the container named Users.Company naming conventions require that names of global groups begin with G_ and names of domain local groups begin with DL_. A domain local group named HRServices does not meet the requirements. The HRServices group has one global group member named G_HRUsers. The HRServices group is assigned to Allow - Full Control permission for a shared folder named HRFiles. The shard folder is located on a file server.You need to rename the HRServices group to meet the naming conventionrequirements. In addition, you need to ensure that user access to the HRFiles shared folder is not disrupted while you perform the procedure.What are two possible ways to achieve this goal? （）(Each correct answer presents a cplete solution. Choose two.)

A. Open Active Directory Users and Computers, and then delete the existing HRServices domain local group. Create a new domain local group named DL_HRServices. Add the G_HRUsers group to the DL_HRServices group. Assign the DL_HRServices group the Allow - Full Control permission for the HRFiles shared folder.

B. Open the Active Directory Users and Computers, and then change the name of the HRservices group to DL_HRServices.

C. Run the following command: dsadd group CN=DL_HRServices,CN=Users,DC=testking.com,DC=com - member CN=G_HRUsers,CN=Users,DC=testking,DC=com

D. Run the following command: dsmove CN=HRServices,CN=Users,DC=testking,DC=com -newname DL_HRServices

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.A new management directive states that users can log to the domain only during business hours. Users who remain logged on after business hours must be automatically disconnected from network resources. You need to enforce this directive by using the minimum amount of administrative effort.Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

A. Configure the Default Domain Policy Group Policy object (GPO) to increase scheduling priority for all users.

B. Configure the Default Domain Policy Group Policy object (GPO) to force users to log off when their logon hours expire.

C. Select all user accounts. Modify the account properties to restrict logon hours to business hours.

D. Create a domain user account named Temp. Configure the account properties to restrict logon hours to business hours.

E. Modify the DACL on the Default Domain Policy Group Policy object (GPO) to assign the Allow - Read permission to the Users group.

You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. All domain controllers run Windows Server 2003.Users who enter an invalid password more than twice in one day must be locked out.You need to configure domain account policy settings to enforce this rule.Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

A. Set the minimum password age to one day.

B. Set the maximum password age to one day.

C. Change the Enforce password history setting to three passwords remembered.

D. Change the Account lockout duration setting to 1440 minutes.

E. Change the Account lockout threshold setting to three invalid logon attempts.

F. Change the Reset account lockout counter after setting to 1440 minutes.

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords.You need to force all users in the Sales department to reset their passwords.What should you do?（）

A. Select all user accounts in the Sales OU. Disable the accounts and re-enable them.

B. Select all user accounts in the Sales OU. Modify the account properties to force all passwords to be changed on next logon.

C. Create a Group Policy object (GPO) and link it to the Sales OU. Modify the password policy to set the maximum password age to 0.

D. Create as Group Policy object (GPO) and link it to the domain. Modify the password policy to set the maximum password age to 0.

You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003.All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users.You need to enable the members of Global-1 to access the file share.What should you do?（）

A. Raise the functional level of the domain to Windows Server 2003.

B. Change the group type of Global-1 to security.

C. Change the group scope of Global-1 to universal.

D. Raise the functional level of the forest to Windows Server 2003.

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level.You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.What should you do?（）

A. Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.

B. On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.

C. Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.

D. Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.You create an organizational unit (OU) named Engineering, which will hold all objects associated with the users and computers in the engineering department. You also create a global group named Engineering Admins, whose members will administer these objects.Now you need to assign the appropriate permissions to the Engineering Admins group so its members can administer the objects in the Engineering OU.First, you use Active Directory Users and Computers to view the properties of the Engineering OU. However, the Security tab is not available.What should you do next?（）

A. Convert the system partition to NTFS.

B. Enable the Advanced Features option in the View menu of Active Directory Users and Computers.

C. Enable the Users, Groups, and Computers as Containers option in the View menu of Active Directory Users and Computers.

D. Log on by using a user account that has Administrator permissions for the Engineering OU.

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.You use a non-administrative user account named Joseph to log on to a client computer. You need to change the password for a domain user account named Sophia.You open the Active Directory Users and Computers console. When you attempt to change Sophia‘s password, you receive the following error message: "Access is denied".You need to remain logged on to the client computer as Joseph, and you need to be able to change Sophia‘s password.What should you do?（）

A. Add the non-administrative domain user account to the local Administrators group.

B. Use the runas command to run Active Directory Users and Computers with domain administrative credentials.

C. From a command prompt, run the net user Sophia /add /passwordreq:yes command.

D. From a command prompt, run the net accounts /uniquepw: /domain command.

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The functional level of the domain is Windows 2000 native.A global group named Travelling contains 7,000 users. All of these users are assigned portable computers, which they will use to run new POSIX-compliant application.You create a global group named POSIX. For all 7,000 users in Travelling, you change the primary group to POSIX.Members of Travelling now report that they cannot access necessary domain resources.How should you solve this problem?（）

A. Ensure that each site on your network is connected to at least one other site by a replication link that uses the SMTP protocol.

B. Create two new global groups, Travelling1 and Travelling2. Place one half of the members of Travelling in each new group. Then place both new groups in Travelling.

C. Remove all domain users from the Users group, and then add all domain users to the group again.

D. Remove all users from Travelling. Change Travelling to a universal group. Add the same users to the new Travelling group.

You are the network administrator for TestKing.com. All network servers run Windows Server 2003.The network consists of 10 offices located across Europa. The OU structure consists of one top-level OU for each branch office. Each top-level OU contains eight or more child OUs, one for each department. User accounts are located in the appropriate departmental OU within the appropriate office OU.For security purposes, you routinely disable user accounts for terminated employees. As part of an internal audit, you need to create a list of all disabled user accounts.You need to generate the list of disabled user accounts as quickly as possible.What are two possible ways to achieve this goal? （）(Each correct answer presents a complete solution. Choose two.)

A. In Active Directory Users and Computers, create a new saved query.

B. Run the dsget user command.

C. Run the dsquery user command.

D. Run the netsh command.