Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2 and are located in the main office. You…

Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2 and are located in the main office. You plan to deploy one Windows Server 2008 R2 domain controller in each branch office. You are concerned that the branch offices will fail to provide adequate security for the new domain controllers. You need to recommend a security solution to meet the following requirements:

• Prevent any unauthorized user from accessing user passwords when the

server is running.

• Prevent any unauthorized user from accessing user passwords either

locally or over the network on each branch office domain controller. Which configuration should you recommend for each branch office domain controller?