You are the network administrator for  The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The Default Domain Policy GPO is configured to prompt
users to change their password 14 days before it expires.
A user who returns from a two-week vacation reportes that she cannot log on to the domain. You discover that when she last logged on, she was prompted to change her password. She reports that she did not change her password before leaving on vacation.
You need to ensure that the user can log on to the domain.
What should you do?（）

You are the network administrator for  The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
A user named King is responsible for managing groups in the domain. In Active Directory, you delegate the permissions to create, delete, and manage groups to him.
When King tries to log on to a domain controller, he receives the error message shown in the exhibit.

You need to ensure that King can immediately manage groups.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)

You are the network administrator for GmBh. The network consists of a single Active Directory domain named  All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing's main office is located in Berlin, which is also the location of all domain controllers. The Berlin office contains 200 client computers.
A branch office is located in Helsinki. This office contains 60 client computers. All user accounts for permanent employees in Helsinki are contained in an organizational unit (OU) named HelUsers. All user accounts for temporary employees in Helsinki are contained in an OU named TempUsers.
A temporary employee named King is hired in the Helsinki office. The business hours in his office are 9:00 A.M. to 5:00 P.M. at 9:05 A.M. on his first Monday at work, King tries to log on to the domain from his client computer. However, he receives the message shown in the exhibit.

You need to ensure that King can log on to the domain.
What should you do?（）

You are the network administrator for your company. The network consists of a single Active Directory domain named . All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
All client computer accounts are stored in the Computer container.
A user named Peter reports that he cannot log on to the domain from his computer.
Peter receives the logon message shown in the exhibit.
Exhibit:
Logon Message
Your account is configured to prevent you from using this computer. Please try another computer.
You need to enable Peter to log on.
What should you do?（）

Your company network consists of a single Windows 2003 Active Directory domain.
You are a member of the Domain Admins group. The network includes 10 member servers running Windows Server 2003 and 4 domain controllers running Windows Server 2003. The 200 client computers all run Windows XP Professional.
The user accounts for employees in the Finance department are located in an Organisational Unit (OU) named Finance. The Finance OU also contains a Global Security group named FinanceUsers. All Finance employees are members of FinanceUsers.
An employee named Alice works in the Finance department. Alice reports that she cannot log in the domain. She receives the error message shown in the exhibit:

You need to enable Alice to log in to the domain.
What should you do?（）

You are the network administrator for . The network consists of a single Active Directory domain named  All network servers run
Windows Server 2003. Half of the client computers run Windows XP Professional and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on five member servers named TestKingSrvC through TestKingSrvG. You place all five servers in an organizational unit (OU) named Terminal Server. You link a group Policy object (GPO) to the Terminal Server OU.
Two days later, users notify you, that the performance of TestKingSrvF is unacceptable slow. You discover that TestKingSrvF has 75 disconnected Terminal
Server sessions.You need to configure all five terminal servers to end disconnected sessions after 15
minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named The functional level of the domain is Windows Server 2003.
Some user accounts have expiring passwords and some do not.
You need to identify all user accounts that do not have expiring passwords. You need to modify the password property to allow the passwords on these accounts to expire. You must complete this task by using the minimum amount of administrative effort.
First, you create a saved query to obtain a list of all user accounts that do not have expiring passwords.
What should you do next?（）

You are the network administrator for The network consists of a single Active Directory domain named . For security reasons,management decides that a particular user must not be able to log on to the domain
after 5:00 P.M. If the user is logged on to the domain at 5:00 P.M., he must be logged off automatically.
You configure the Logon Hours setting for the appropriate user account. Thatnight, you verify that the user cannot log on to the domain after 5:00 P.M. The nextday, you notice that the user is still accessing domain resources at 6:00 P.M. Youverify that the time on the user's computer and on the domain controller arecorrect.
You need to ensure that the user is logged off automatically if he is still working onthe domain after 5:00 P.M.
What should you do?（）

You are the administrator of a Windows 2003 domain The domain contains 20 Windows 2000 Professional computers and two Windows 2003 Server computers.
For the domain, you want to set an account policy that locks any user's account after three consecutive failed logon attempts. You also want to ensure that only administrators will be able to unlock the account.
Which two actions should you take?（） (Each correct answer presents part of the solution. Choose two)

You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing has 16 different office locations. Each office is a separate Active Directory site. You work in the main office.
A user named Anne works in a branch office. Every morning for one week, Anne reports that her user account is locked out. Each time, you are obliged to unlock her account. You suspect that Anne's account is being misused or attacked outside of regular business hours.
You need to investigate the cause of the account lockout.
Where should you search for security events?（）

You are the administrator of an Active Directory domain named  A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain.
You need to enable the user to log on to the domain.
What should you do? （）(Choose two)