You are the administrator of an Active Directory domain named Auser reports that he cannot log on to a Windows Server 2003 computer that containsa critical application.You discover that the organizational unit (OU) in which the server is located wasdelete
题目
You are the administrator of an Active Directory domain named Auser reports that he cannot log on to a Windows Server 2003 computer that containsa critical application.You discover that the organizational unit (OU) in which the server is located wasdeleted. You discover that the user rights for this server are controlled by GroupPolicy.You need to restore access to the server. You need to achieve this goal by using theminimum amount of administrative effort.What should you do?（）
A. Perform a normal restoration of the System State data for the domain controller. Force replication.
B. Perform an authoritative restoration of the System State data for the domain controller. Mark the OU for replication.
C. Re-create the OU that was deleted. Reapply Group Policy, and then add the computer account and any necessary users or groups.
D. Perform an Automated System Recovery (ASR) restoration on the domain controller.
相似考题
更多“You are the administrator of an Active Directory domain named Auser reports that he cannot ”相关问题
-
第1题：
You are the network administrator for your company's Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professional client computers. A new administrator named Paul is hired to assist you in deploying Windows XP Professional to 100 new computers. Paul installs the operating system on a new computer named Client1. However, when Paul tries to log on to the domain from Client1, he is unsuccessful. The logon dialog box does not allow him to view and select the domain name. You need to ensure that Paul can log on to the domain from Client1. What should you do? （）
- A、Enable the computer account for Client1.
- B、Configure Client1 as a member of the domain.
- C、Add Paul's user account to the Enterprise Admins group.
- D、Add Paul's user account to the Server Operators group.
正确答案:C -
第2题：
You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)
- A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.
- B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.
- C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.
- D、Use Computer Management to reset the password for the local Administrator account.
正确答案:B,C -
第3题：
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）
- A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
- B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
- C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
- D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
正确答案:A -
第4题：
You are the network administrator for your company. The network consists of a single Active Directory domain named . All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. All client computer accounts are stored in the Computer container. A user named Peter reports that he cannot log on to the domain from his computer. Peter receives the logon message shown in the exhibit. Exhibit: Logon Message Your account is configured to prevent you from using this computer. Please try another computer. You need to enable Peter to log on. What should you do?（）
- A、Create an account for Peter's computer in the Computers container.
- B、Grant the Log on locally user right to Peter's user account.
- C、Enable Peter's user account.
- D、Change the properties of Peter's user account so he can log on to any computer.
正确答案:D -
第5题：
You are the administrator of an Active Directory domain named A user reports that he cannot log on to a Windows Server 2003 computer that contains a critical application. You discover that the organizational unit (OU) in which the server is located was deleted. You discover that the user rights for this server are controlled by Group Policy. You need to restore access to the server. You need to achieve this goal by using the minimum amount of administrative effort. What should you do?（）
- A、Perform a normal restoration of the System State data for the domain controller. Force replication.
- B、Perform an authoritative restoration of the System State data for the domain controller. Mark the OU for replication.
- C、Re-create the OU that was deleted. Reapply Group Policy, and then add the computer account and any necessary users or groups.
- D、Perform an Automated System Recovery (ASR) restoration on the domain controller.
正确答案:B -
第6题：
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on. You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log. "NETLOGON Event ID 3210: Failed to authenticate with //Server5, a Windows NT domain controller for domain TestKing". You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear. You need to ensure that Lilli can log on to the domain successfully. What should you do?（）
- A、Recreate the user account for Lilli and add her to all appropriate security groups.
- B、Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
- C、Add Client223 to a workgroup. Then join Client223 to the domain.
- D、Reset the computer account for Server5 in Active Directory Users and Computers.
正确答案:C -
第7题：
单选题Your company has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the schema master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the schema master role. You need to ensure that DC2 holds the schema master role. What should you do（）ARegister the Schmmgmt.dll. Start the Active Directory Schema snap-in.
BConfigure DC2 as a bridgehead server.
COn DC2， seize the schema master role.
DLog off and log on again to Active Directory by using an account that is a member of the Schema Admins group. Start the Active Directory Schema snap-in.
正确答案： A解析： 暂无解析 -
第8题：
单选题Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）AModify the NTFS permissions on the Data folder.
BModify the share permissions on the Data share.
CAdd the domain administrator to the local Administrator’s group on Server1.
DMove the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.
正确答案： A解析： 暂无解析 -
第9题：
单选题You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers. You use a non-administrative user account named Joseph to log on to a client computer. You need to change the password for a domain user account named Sophia. You open the Active Directory Users and Computers console. When you attempt to change Sophia's password, you receive the following error message: "Access is denied". You need to remain logged on to the client computer as Joseph, and you need to be able to change Sophia's password. What should you do?（）AAdd the non-administrative domain user account to the local Administrators group.
BUse the runas command to run Active Directory Users and Computers with domain administrative credentials.
CFrom a command prompt, run the net user Sophia /add /passwordreq:yes command.
DFrom a command prompt, run the net accounts /uniquepw: /domain command.
正确答案： A解析： 暂无解析 -
第10题：
单选题Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At 07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort. What should you do（）AOn DC1， run the Restore-ADObject cmdlet.
BOn DC3， run the Restore-ADObject cmdlet.
COn DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain Services.
DOn DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Domain Services.
正确答案： B解析： 暂无解析 -
第11题：
单选题You are a network administrator for Your network consists of a single Active Directory domain named All servers run Windows Server 2003. A help desk user reports that a user object was accidentally deleted and the user can no longer log on to the domain and access resources. You confirm that the user object was included in the most recent backup. You need to enable the user to log on to the domain. You must ensure that the user retains access to resources. What should you do?（）AInstall a new domain controller. Install Active Directory from media by using the most recent backup. Manually initiate replication.
BDecrease the garbage collection interval. Perform a nonauthorative restoration of Active Directory by using the most recent backup.
CPerform a nonauthorative restoration of Active Directory by using the most recent backup. Authoritatively restore the user object that was deleted.
DRe-create a user object that has the same user principal name (UPN) as the user object that was deleted. Authoritatively restore this user object.
正确答案： B解析： 暂无解析 -
第12题：
单选题You are the administrator of an Active Directory domain named A user reports that he cannot log on to a Windows Server 2003 computer that contains a critical application. You discover that the organizational unit (OU) in which the server is located was deleted. You discover that the user rights for this server are controlled by Group Policy. You need to restore access to the server. You need to achieve this goal by using the minimum amount of administrative effort. What should you do?（）APerform a normal restoration of the System State data for the domain controller. Force replication.
BPerform an authoritative restoration of the System State data for the domain controller. Mark the OU for replication.
CRe-create the OU that was deleted. Reapply Group Policy, and then add the computer account and any necessary users or groups.
DPerform an Automated System Recovery (ASR) restoration on the domain controller.
正确答案： B解析： 暂无解析 -
第13题：
Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At 07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort. What should you do（）
- A、On DC1， run the Restore-ADObject cmdlet.
- B、On DC3， run the Restore-ADObject cmdlet.
- C、On DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
- D、On DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do
正确答案:D -
第14题：
You need to remove the Active Directory Domain Services role from a domain controller named DC1. What should you do（）
- A、Run the netdom remove DC1 command
- B、Run the nltest /remove_server： DC1 command
- C、Run the Dcpromo utility. Remove the Active Directory Domain Services role.
- D、Reset the Domain Controller computer account by using the Active Directory Users and Computers utility.
正确答案:C -
第15题：
Your company’s network has client computers that run Windows 7. When a user attempts to log on to the domain from a computer named Client1，she receives the following message： The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect. You need to ensure that the user can log on to the domain from Client1. What should you do？（）
- A、Disjoin and rejoin Client1 to the domain.
- B、Add the computer account for Client1 to the Domain Computers Active Directory group.
- C、Reset the account password for Client1 through Active Directory Users and Computers.
- D、Reset the account password for the user through Active Directory Users and Computers.
正确答案:A -
第16题：
You are designing a DNS name resolution strategy to meet the business and technical requirements. Which action or actions should you perform？（）
- A、 Create an Active Directory-integrated zone named cohovineyard.com on a domain controller in Los Angeles.
- B、 Create an Active Directory-integrated zone named paris.cohovineyard.com on a domain controller in Paris.
- C、 Create an Active Directory-integrated zone named sydney.cohovineyard.com on a domain controller in Sydney.
- D、 On a domain controller in Los Angeles， delegate paris.cohovineyard.com to a domain controller in Paris.
- E、 On a domain controller in Los Angeles， delegate sydney.cohovineyard.com to a domain controller in Sydney.
正确答案:A -
第17题：
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）
- A、Add a new account store and configure it.
- B、Add a new resource partner and configure it
- C、Add a new resource store and configure it
- D、Add a new administrator account on AD FS and configure it
- E、None of the above
正确答案:A -
第18题：
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The Default Domain Policy GPO is configured to prompt users to change their password 14 days before it expires. A user who returns from a two-week vacation reportes that she cannot log on to the domain. You discover that when she last logged on, she was prompted to change her password. She reports that she did not change her password before leaving on vacation. You need to ensure that the user can log on to the domain. What should you do?（）
- A、Enable the user account.
- B、Reset the password for the user account.
- C、Use Active Directory Users and Computers to select the Password never expires option.
- D、Configure the Prompt user to change password before expiration security policy option to 21 days.
正确答案:B -
第19题：
单选题Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At 07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort. What should you do（）AOn DC1， run the Restore-ADObject cmdlet.
BOn DC3， run the Restore-ADObject cmdlet.
COn DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
DOn DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do
正确答案： D解析： 暂无解析 -
第20题：
单选题You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional. Multiple users share the same client computer. A server named TestKing2 functions as a file and print server. You set the profile path for all user accounts to //TestKing2/Profiles/username. Some domain users were added to the local Administrators group on the Windows XP Professional computers. A user reports that other users can log on to client computers that he has previously used and gain access to files stored in his My Documents folder on the local hard disk. You need to permanently prevent users from being able to access the My Documents folder of other domain users on the client computers. What should you do?（）AIn Active Directory, modify the Default Domain Policy. Disable the Do not check for user ownership of Roaming Profile Folders setting.
BIn Active Directory, modify the Default Domain Policy. Enable the Delete cached copies of roaming profiles setting.
CLog on to all client computers and delete all user profiles from the local hard disks.
DLog on to all client computers and configure the Number of previous logons to cache setting to 0.
正确答案： B解析： 暂无解析 -
第21题：
单选题You are the network administrator for The network consists of a single Active Directory domain named Site License Logging is enabled in the domain. Administrators report that they cannot manage Client Access Licenses. When they attempt to open Licensing, they receive the following error: "RPC Server too busy." You suspect there is a problem on the domain controller that functions as the site license server. You do not know which domain controller is the site license server. You need to locate the site license server. What should you do?（）AOpen Licensing, click the Server Browser tab, and expand your domain. Inspect the properties of each server.
BOpen Active Directory Sites and Services, open the properties for the site name. Inspect the contents of the Location tab.
COpen the Active Directory Users and Computers, click your domain name, click Action, and select Operations Masters. Inspect the contents of the Infrastructure tab.
DOpen Active Directory Sites and Services, and click your site name. Inspect the properties of the Licensing Site Settings.
正确答案： C解析： 暂无解析 -
第22题：
单选题You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing has 16 different office locations. Each office is a separate Active Directory site. You work in the main office. A user named Anne works in a branch office. Every morning for one week, Anne reports that her user account is locked out. Each time, you are obliged to unlock her account. You suspect that Anne's account is being misused or attacked outside of regular business hours. You need to investigate the cause of the account lockout. Where should you search for security events?（）AOnly in the event log of a domain controller in your site.
BOnly in the event logs of the domain controllers in Anne's site.
CIn the event logs of all domain controllers in all sites.
DOnly in the event log of Anne's computer.
正确答案： C解析： 暂无解析 -
第23题：
单选题You are the network administrator for The network consists of a single Active Directory domain The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. The network includes a shared folder named TestKingInfo. Your boss Dr. King reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. You need to ensure that all appropriate users can access TestKingInfo. What should you do?（）ADecrease the default user quota limit.
BRaise the functional level of the domain to Windows Server 2003.
CPurchase additional client access licenses.
DMove TestKingInfo to one of the servers.
正确答案： C解析： 暂无解析