Question 3) 2003 Active Directory Infrastructure

Posted on
Share on Google+Share on LinkedInShare on FacebookShare on RedditTweet about this on TwitterEmail this to someone

Objective: Managing and Maintaining an Active Directory Infrastructure
SubObjective : Manage an Active Directory Forest and Domain Structure
Single Answer Multiple Choice

 

You are the network administrator for Cliner Gattam International (CGI). The company’s logical network design consists of a single Active Directory domain named cgi.com. CGI has five offices. An Active Directory site is created for each location. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

 

CGI has recently merged with Smithfield Manufacturing (SFM). The company’s logical network design consists of a single Active Directory domain named sfmanu.com.

 

SFM has 1000 employees at one manufacturing plant. These employees must have user accounts in cgi.com and be able to authenticate and access resources on the cgi.com network. You will be deploying cgi.com domain controllers at the SFM site. All client computers in this location will join the domain. The site administrator provides you with a comma-delimited file containing user object information from sfmanu.com. You plan to import this data to Active Directory using the csvde utility.

 

SFM users must maintain their existing e-mail identities (user@sfmanu.com). However, you have been instructed maintain a single Active Directory domain. You must be able to import this data while allowing the new users to maintain their existing e-mail identities.

 

What should you do?

 

A. Create a one-way forest trust using Netdom in which cgi.com trusts sfmanu.com.
B. Create a one-way forest trust using Netdom in which sfmanu.com trusts cgi.com.
C. Create a UPN suffix named sfmanu.com using Active Directory Domains and Trusts.
D. Migrate the user accounts from sfmanu.com to cgi.com using the Active Directory Migration Tool (ADMT).

 


Answer:
C. Create a UPN suffix named sfmanu.com using Active Directory Domains and Trusts.

 

Tutorial:
You should create a UPN suffix named sfmanu.com using Active Directory Domains and Trusts.

 

To import the text file from sfmanu.com, you must use Active Directory Domains and Trusts to create a UPN suffix named sfmanu.com. The comma-delimited text file will be exported from sfmanu.com using the user principal name as user@sfmanu.com. Creating a matching UPN suffix will allow the text file to be imported using the csvde utility. This action will meet the requirement to allow users to retain their Smithfield Manufacturing identities.

 

The user principal name (UPN) suffix is the part of the UPN to the right of the @ character. By default, the UPN suffix for a user account is the DNS domain name of the domain that contains the user account. You can add alternative UPN suffixes to simplify administration and user logon processes by providing a single UPN suffix for all users. The UPN suffix is applicable within the Active Directory forest, but is not required to be a valid DNS domain name.

 

You should not create a one-way forest trust relationship in either direction. Because the migration is being performed by importing from a text file, a trust relationship is not necessary. Trust relationships are required when you are migrating objects from one forest to another using a migration tool, such as ClonePrincipal.

 

You should not migrate the user accounts from sfmanu.com to cgi.com using the Active Directory Migration Tool (ADMT). The Active Directory Migration Tool (ADMT) is used to perform intraforest or interforest object migrations. However, ADMT cannot be used to import objects from comma-delimited files.

 

Reference:
1. Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure – Module 4: Implementing User, Group, and Computer Accounts
– Lesson: Implementing User Principal Name Suffixes – All

 

2. Windows Server 2003 Help – Search
– To add user principal name suffixes

 

These questions are derived from the Self Test Software Practice Test for Microsoft Exam #70-294: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

Share on Google+Share on LinkedInShare on FacebookShare on RedditTweet about this on TwitterEmail this to someone
cmadmin

ABOUT THE AUTHOR

Posted in Archive|

Comment:

Leave a comment

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>