RE: nother confusing question 70-290

I'll gladly give you the correct answer if you tell me why you think the
answer may or may not be A or D and/or why the answer may or may not not be B
or C.


"Piotr Majcher" wrote:

> Hi guys,
> i have another confusing question from the 70-290 exam,
> which answer do you think is correct and why.
> thanks in advance.
>
> Piotr majcher
>
>
> here it is:
>
> You are the network administrator for Certkiller.com. Your network consists
> of a single Active Directory domain named Certkiller.com. All network servers
> - Windows Server 2003. Certkiller.com has office in Atlanta, Denver, and
> Vancouver. Each office has one domain controller. Each office also has its
> own organization unit (OU), which contains all user accounts and computer
> accounts in that office.
> The Denver OU is accidentally deleted from Active Directory. You perform an
> authoritative restoration of that OU. Some users in Denver now report that
> they receive the following error message when they try to log on to the
> domain.
> "The session setup from the computer DOMAINMEMBER failed to authenticate.
> The name of the account referenced is the security database in
> DOMIAINMEMBER$. The following error occurred: "Access is denied".
> How should you solve this problem?
> A. Reset the computer accounts of the computers that receive the error
> message.
> Instruct the affected users to restart their computers.
> B. Perform a nonauthoritative restoration of Active Directory.
> Force directory replication on all domain controllers.
> C. Restart the Kerberos Key Distribution Center service on each domain
> controller.
> D. Run Nltest.exe on the computers that receive the error message.
> Restart the Net Logon service on the domain controller on Denver.
.

Relevant Pages

  • Problem with Lockout Accounts
    ... Problem with Lockout Accounts ... I have a strange problem on my Win 2K Adv Server. ... This is the domain controller of my Active Directory. ...
    (microsoft.public.win2000.active_directory)
  • Re: New user accounts disabled
    ... This may is a replication delay, you may have created the accounts at one ... domain controller, and trying to authenticate against another where the ... >I have created several new user accounts in my 2000 Domain today but when I ... I can find no indication in Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: IUSR_MYSERVER and IWAM_MYSERVER Missing from my IIS6 Box!
    ... There are no local accounts on a domain controller. ... Active directory contains IUSR and IWAM ...
    (microsoft.public.inetserver.iis)
  • RE: NTDS.dit file is currupt
    ... "microsoft" wrote:> We are currently facing a serious problem with one our client server. ... > After rebooting the machine in directory services restore mode, I had> followed the steps below; ntdsutil neither defrag Active Directory Database> nor repair. ... Restart the domain controller. ... Check the integrity of the Active Directory database. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD sites and services
    ... A search for "Active Directory Sites" yeilds the following: ... After an Unsuccessful Domain Controller Demotion" ... http://support.microsoft.com?kbid=220140 "FRS Replication Protocol and Topology ... Windows 2000 Domain Controllers" ...
    (microsoft.public.win2000.active_directory)