Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. You need…

Question

Options

• AInstall Active Directory Lightweight Directory Services (AD LDS).
• BInstall Active Directory Domain Services (AD DS) on a Server Core installation of Windows
• CInstall Active Directory Domain Services (AD DS).
• DInstall Active Directory Domain Services (AD DS).

• A
  12% (4)
• B
  6% (2)
• C
  79% (27)
• D
  3% (1)

Explanation

To deploy Windows Server 2008 domain controller in each branch office and to ensure that branch office domain controllers would allow users to log on to the domain you need to install Active Directory Domain Services (AD DS) and select the read-only domain controller (RODC) option during installation. RODC store the passwords of only some domain users and allows you to download Group Policy objects (GPOs). Except for account passwords, an RODC holds all the Active Directory objects and attributes that a writable domain controller holds. By default, an RODC does not store user or computer credentials. The exceptions are the computer account of the RODC and a special krbtgt account that each RODC has. You must explicitly allow any other credential caching on an ecaf649bd3dd1033.mspx?mfr=true

No community discussion yet for this question.