Which tool should you use?
What are two possible ways to achieve this goal?
What should you use?
What should you do?
What tool should you use?
Which two objects should you verify on each domain controller?