Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest. 
What should you do？（）

多项选择题You are a network administrator for your company. The network consists of a single Active Directory  domain. All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003.  The organizational unit （OU） structure is shown in the exhibit. （Click the Exhibit button.） Your company  uses an X.500 directory service enabled product to support a sales and marketing application. The  application is used only by users in the sales department and the marketing department. The application  uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active  Directory for all Sales and Marketing users. These users are instructed to log on by using their  InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy  changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product.  All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson  objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company.  Mikhail is responsible for managing the objects for users who require access to the X.500 directoryservice enabled product. You need to configure Active Directory to allow Mikhail to perform his  responsibilities.  Which action or actions should you take？（）

A. On the domain， grant Mikhail the permission to manage user objects.
B. On the domain， grant Mikhail the permission to manage InetOrgPerson objects.
C. On the Sales OU， block the inheritance of permissions.
D. On the Marketing OU， block the inheritance of permissions.
E. On the Dev OU， block the inheritance of permissions

单项选择题You have a single Active Directory directory service domain. All user accounts in the sales   department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers.  What should you do？（）

A. Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.
B. Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.
C. Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.
D. Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.

多项选择题You have a single Active Directory directory service forest named contoso.com. You create baseline  security settings for a group of computers， and you store the settings in a database. You deploy thebaseline security settings. You need to confirm that the security settings on one of the computers are  applied correctly.  What are two possible commands that you can run to achieve this goal？（）

A. secedit
B. gpupdate
C. netdom
D. scwcmd

单项选择题You are the network administrator for your company. The network consists of a single Active   Directory domain that contains four domain controllers. All servers run Windows Server 2003. All user  accounts are located in an organizational unit （OU） named CompanyUsers. A written company policyrequires all users to use strong passwords. User passwords must contain a mixture of letters， numbers， or  special characters. Passwords must be at least 10 characters long. Passwords must be changed at least  every 60 days， and the new password cannot be the same as the old one. To enforce this requirement，  you create a Group Policy object （GPO） named Password Policies and link the GPO to the  CompanyUsers OU. The settings in the Password Policy section of the Password Policies GPO are  shown in the exhibit. （Click the Exhibit button.） You discover that users are creating simple passwords that  do not meet the complexity requirements. You need to ensure that the company password requirements  are enforced.  What should you do？（）

A. Link the Password Policies GPO to the Domain Controllers OU. Make it the first GPO in the list.
B. Configure the properties of the Password Policies GPO so that it cannot be overridden.
C. Delete the Password Policies GPO. Edit the Default Domain Policy GPO to include the settings from the Password Policy section of the Password Policies GPO.
D. Delete the Password Policies GPO. Edit the Default Domain Controllers Policy GPO to include the settings from the Password Policy section of the Password Policies GPO.

单项选择题You have a single Active Directory directory service domain. You plan to use a server named Server1  to deliver Microsoft updates to all your companys workstations. The workstations are located in an  organizational unit （OU） named Workstations. Server1 is located in an OU named Servers. You need to  ensure that all workstations receive Microsoft updates from Server1 and that the updates are installed at  3：00 AM each day.  What should you do？（）

A. Create a GPO and enable the Configure Automatic Updates and Enable recommended updates via    automatic Updates options. Link the GPO to the Workstations OU.
B. Create a GPO and enable the Configure Automatic Updates and Automatic Updates detection frequency options. Link the GPO to the Workstations OU.
C. Create a GPO and enable the Configure Automatic Updates and Specify intranet Microsoft update service location options. Link the GPO to the domain.
D. Create a GPO enable the Configure Automatic Updates and Specify intranet Microsoft update service location options. Link the GPO to the Servers OU.