You work as the enterprise administrator at ABC.com. ABC.com has a domain named ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. ABC.com has two computers configured as follows:
ABC-DC01 configured as a domain controller.
ABC-DC02 configured as a Read-Only Domain Controller (RODC).
ABC.com Marketing division members makes use of ABC-DC01 to log onto the domain.
How would you ensure that ABC-DC02 can be used by the Marketing division to log onto the domain?
A.
By deploying a computer running Active Directory Certificate Services (AD CS).
B.
By using a Password Replication Policy on the RODC.
C.
By installing and configuring an Active Directory Federation Services (AD FS) front-end server.
D.
By deploying a computer running Active Directory Lightweight Directory Services (AD LDS) and Active Directory Domain Services (AD DS).
Explanation:
You should use the Password Replication Policy on the RODC. This will allow the users at the Dallas office to log on to the domain with RODC. RODCs don’t cache any user or machine passwords.