Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application
Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.
Use the dsadd OU
Use the dsmod OU
第1题：
Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements： èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being printed. èAllows users in the external partner organization to access the protected content to which they have been granted rights. èSends all inter-organizational traffic over port 443. èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）
第2题：
Your company has a server that runs an instance of Active Directory Lightweight Directory Services （AD LDS）. You need to create new organizational units in the AD LDS application directory partition. What should you do（）
第3题：
Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）
第4题：
Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1. You connect to Instance1 by using ADSI Edit. You run the Create Object wizard and you discover that there is no User object class. You need to ensure that you can create user objects in Instance1. What should you do（）
第5题：
Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Development. You have a member server that runs Windows Server 2008 R2 with the Hyper-V role installed. You need to ensure that Development group members can only manage virtual machines （VMs）. Development group members must not have administrative privileges on the host server. What should you use？（）
第6题：
Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）
第7题：
Your company has a server that runs Windows Server 2008 R2. The server is configured as a remoteaccess server. The external firewall has TCP port 80 and TCP port 443 open for remoteconnections. You have a home computer that runs Windows 7. You need to establish secure remote accessconnection from the home computer to the remote access server. Which type of connection should you configure? （）
第8题：
Your company has a branch office that is configured as a separate Active Directory site and has an Active Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）
第9题：
Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service， but it does not start. You need to ensure that the DHCP service starts. What should you do？（）
第10题：
Your company has an Active Directory domain. The company has a server named Server1 that has the Terminal Services role and the Terminal Services Web Access role installed. The company has a server named Server2 that runs ISA Server 2006. The company deploys the Terminal Services Gateway （TS Gateway） role on a new server named Server3. The company wants to use ISA as the SSL endpoint for Terminal Server connections. You need to configure the TS Gateway role on Server3 to use ISA 2006 on Server2. What should you do？（）