Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Trust

Posted on 2011-02-22
4
Medium Priority
?
377 Views
Last Modified: 2012-05-11
Testra, Inc. has a Windows Server 2003 Active Directory forest. Testra’s
research division has developed a custom expense application that integrates with
Active Directory.
They have added two new attributes to user and computer objects in the schema
for this application. The application worked well in the research division’s test
forest, which consisted of one domain that the research division’s programmers
have extensively modified. However, when the application is installed in the root
domain of the testra.com forest, users in the sales.testra.com and prod.testra.com
domains are unable to use the application. Which of the following actions should
you take?
A. Migrate all users to the testra.com domain
B. Add the Domain Admins groups of both the sales.testra.com and prod .testra.com
domains as members of the Schema Admins group
C. Using the Active Directory Schema console, add the two new attributes to the
global catalog. Force replication and test the application as a user in each of the
sales.testra.com and prod.testra.com domains
D. Create shortcut trusts between the root domain and sales.testra.com and
prod.testra.com
/-
I go for d)
0
Comment
Question by:kunalclk
4 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 668 total points
ID: 34957263
I guess I'd go for D too.  A & B are definitely not correct.  

The reason I say "probably" is because if those are child domains then you would not need a shortcut trust.
0
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 664 total points
ID: 34958515
I love Microsoft exam questions ;) I would pick up C
D for me is not necessary because domains have two-way transitive trust relationship established automatically :)

I agree that A&B are incorrect.

Regards,
Krzysztof
0
 
LVL 11

Assisted Solution

by:Sigurdur Haraldsson
Sigurdur Haraldsson earned 668 total points
ID: 34960427
It's C. You need to let the other domains know about the new attributes.

"They have added two new attributes to user and computer objects in the schema for this application."
0
 
LVL 2

Author Closing Comment

by:kunalclk
ID: 34963680
tnx
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question