You need to configure the Active Directory environment to support the application of multiple password policies
You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when they access resources in the eng.na.contoso.com domain