12. You are the desktop administrator for a company that has 5 Windows 2000 Server computers and 200 Windows 2000 professional computers. All computers are joining a single domain named MCSADOMAIN.COM. Recently, your company bought 10 new computers that have Windows 2000 Professional Pre-installed. When you attempt to logon to one of the workstation using your domain account, and try to join the computer to MCSADOMAIN.COM, you receive an error message indicate that access denied. How can you ensure that you can join all new computers to Windows 2000 domain?

A. Create a computer account for each new computer using Active Directory Users and Computers and then join them to the domain.
B. Log on to each computer using your local administrator account instead of your domain user account and then join each computer to the domain.
C. Log on to each computer using your local administrator account instead of your domain user account, join each computer to the domain, when prompted for username and password, use your domain account.
D. Reinstall all computers with a fresh copy of Windows 2000 Professional to clear the SID.
E. Make sure that the DNS setting for the client computers are set properly.

For this case, the operation to join the computer to the domain failed due to the lack of permission as the error message indicate that access is denied. Since you logon to the system using your domain user account, you will have the default permission to add computer to active directory, however, you will not have the local administrator privileges to perform join domain in that computer. Notably, the permission to add or join computer to a domain is at the domain level, obtaining that permission only allow you to add and join computer account to the Active Directory domain, however, the local computer itself has its own security permission that may block you from doing so. To perform that operation, you should logon to the computer using local administrator account, and then when prompt for username and password, you should use your domain username and password which has the domain level permission to add computer to Active directory. Adding computer account into the active directory using the Active directory users and computers only pre-create the computer account but will not force the computer to join the domain until one of the users that use the computer set the computer to join the domain. When DNS setting is incorrect, the computer will not be able to resolve the Domain name of your domain controller, with that, the join domain operation will fail, but the error message should indicate that domain cannot be found but not access denied.

From Microsoft Documentation:
========================================
You must be logged on as an administrator to the local computer and have a valid user name and password to join the computer to a domain. If you do not know which user name and password to use, contact your network administrator.
========================================

Answer: C

References:

http://www.microsoft.com/windows2000/en/advanced/help/sysdm_ident_join_domain.htm
http://support.microsoft.com/support/kb/articles/Q251/3/35.ASP

 

Free MCSA Practice Test question number #8 provided by http://www.itexams.co.uk for 70-218 exam

 

18. You are the domain administrator of your company Windows 2000 Domain. Your company has a single domain named MCSA.COM. Under MCSA.COM domain, an organisational Unit (OU) named London is created. The London OU contains four Ous namely Support, Training, Admin, and Marketing. You need to deploy a program called Workflow to all computers that are located in Support OU so that whenever a user logon to any of the computers under Support OU, he or she can use that program. How can you accomplish this task? (Select the correct answers)

A. Create a new GPO.
B. Create a MSI package named Workflow and store it into a network share.
C. Create a MSI package named Workflow and store it into a local hard drive.
D. Publish the network share to Active directory.
E. Add MSI package to the new GPO by assigning it to users.
F. Add MSI package to the new GPO by publishing it to users.
G. Add MSI package to the new GPO by assigning it to computers.
H. Add MSI package to the new GPO by publishing it to computers.
I. Link the GPO to Support OU.
J. Link the GPO to London OU.
K. Specify the installation interface to be Maximum

From Microsoft Web site:
===================================
When you publish an application to users, the application does not appear as installed on the users' computers. No shortcuts are visible on the desktop or on the Start menu, and no changes are made to the local registry on the users' computers. Instead, published applications store their advertisement attributes in Active Directory. Information, such as the application's name and file associations, is exposed to the users in the Active Directory container. The application is then available for the user to install by using Add or Remove Programs in Control Panel or by clicking a file that is associated with the application, such as an .xls file for Microsoft Excel.

When you assign an application to a user, the application is advertised to the user the next time the user logs on to a workstation. The application advertisement follows the user, regardless of which physical computer he or she actually uses. The application is installed the first time that the user activates the application on the computer, either by selecting the application on the Start menu or by activating a document that is associated with the application.

Assigning to computers
When you assign an application to the computer, the application is advertised and the installation is performed when it is safe to do so. Typically, this happens when the computer starts up, so that there are no competing processes on the computer.
=========================================

To accomplish the above task, you need to create a new GPO first, after that, you need to create a MSI package and store it to network share rather than local hard drive because the path to the package must be accessible by target computers via network when the installation is started. Next, you have to assign it to computers, as the requirement is to deploy the package to computers rather than users. Also, you should assign it rather than publish it as you want the package to be installed automatically, in addition, packages can be published only to users, not to computers. Finally, you have to link it to the Support OU rather than London OU. It is not necessary to publish the network share in Active directory, as the network share path given in the policy can be used to locate files by Windows installer service directly. You do not need to specify the installation interface to be maximum as that option will show the detail messages, screen, etc. on the installation, which is normally needed when you troubleshoot a problem.

Answer: A, B, G, I

References:
http://www.microsoft.com/TechNet/prodtechnol/winxppro/proddocs/sag_ADEconcepts_01.asp
http://www.microsoft.com/TechNet/prodtechnol/winxppro/proddocs/appmgr_publish.asp

Free MCSA Practice Test question number #9 provided by http://www.itexams.co.uk for 70-218 exam

Note: The questions and explanations provided above are free to view by anyone, however, If you would like to post the Free MCSA and MCSE practice Test questions provided by IT Exams Ltd. to a discussion board, forum or whatsoever free public accessible resources, you should post the line "Free MCSA and MCSE Practice Test question number #xx provided by http://www.itexams.co.uk for 70-218 exam" together with your posting. IT Exams Ltd. is the owner of All material in this page unless otherwise their sources are quoted.