Case Study Questions

1.	How many domains will be required to support the design? 1 2 3 4
2.	What is the best option for moving the objects from the Atlanta domain into your new Active Directory forest? Create a shortcut trust between the domains and add accounts from the Atlanta domain to groups in the Insane Systems domain. Create a two-way trust between the domains and run the ADMT utility to merge the users and computers from the Atlanta domain to the Insane-Systems domain. Create a forest trust between the domains and run the ADMT utility to merge the users and computers from the Atlanta domain to the Insane-Systems domain. Do an in-place migration of the Atlanta domain and specify that it should join the existing forest (either as a child domain of the existing tree or as a new tree).
3.	Prior to the migration, what kind of trust should you set up between the Atlanta office and the Chicago office if you want to allow Atlanta users to access Chicago resources? Forest trust Shortcut trust Realm trust External trust
4.	Which administrative model best describes this environment? Centralized Decentralized Hybrid Outsourced
5.	Prior to migrating the user accounts to the new Active Directory domain, at which functional level should the domain be set? Windows 2000 Native Mode functional level Windows 2000 Mixed Mode functional level Windows Server 2003 functional level Windows Server 2003 Interim functional level

Answers

1.	B. Because all of the resources will be administered from the headquarters location in Chicago, a single forest is all that is necessary. The password and account lockout restrictions of the Atlanta office require an additional domain, as password and lockout settings are controlled at the domain level and cannot be overridden.
2.	D. Because the Atlanta domain is going to be migrated to the forest, an in-place upgrade of the domain can be planned for in the design. As the upgrade is being performed, you can make it a domain within the forest.
3.	D. Forest and shortcut trusts are not allowed between NT 4 and Active Directory domains. A realm trust is used with UNIX Kerberos realms. An external trust can be built to allow the accounts to have access to their original resources until they are moved.
4.	B. Because there are administrative accounts within the Atlanta office control their own resources, the administrative model is decentralized.
5.	A. If the user accounts will need to retain their original SIDs so that they will still maintain access to their resources from the original domain, the minimum functional level for the domain will have to be set at the Windows 2000 Native Mode functional level.