You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory forest. The forest contains a root domain and two child domains named la.contoso.com and na.contoso.com.
All the servers on the network run Windows Server 2008 and all client computers run Windows Vista. The company has a corporate policy according to which, all local guest accounts must be renamed and disabled and all the local administrator accounts must be renamed.
Which of the following options would you choose to implement the company’s policy?
A.
On each domain, implement a GPO.
B.
On the root domain, implement a GPO.
C.
On the root domain controllers, deploy AD RMS
D.
On all domain controllers in each domain, deploy NPAS
E.
None of the above
Explanation:
To deploy the corporate policy of the company that states that all the local administrator accounts must be renamed and all the local guest accounts must be renamed and disabled, you need to implement a Group Policy object (GPO) for each domain.
You can change the administrator account and guest account names by using Group Policy in Windows Server 2003. This may be useful if you want to change the name of the administrator or guest user accounts to minimize the chance of misuse of these accounts