Home » Microsoft » 70-640 » Which two actions should you perform?
Your company has a main office and a branch office that are configured as a single Active Directory forest.
The functional level of the Active Directory forest is Windows Server 2003. There are four Windows Server 2003 domain controllers in the main office.
You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch office.
Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)
A. Raise the functional level of the forest to Windows Server 2008.
B. Deploy a Windows Server 2008 domain controller at the main office.
C. Raise the functional level of the domain to Windows Server 2008.
D. Run the adprep/rodcprep command.
Correct Answer: BD
Explanation/Reference:
http://technet.microsoft.com/en-us/library/cc731243%28v=ws.10%29.aspx
Prerequisites for Deploying an RODC
Complete the following prerequisites before you deploy a read-only domain controller
Ensure that the forest functional level is Windows Server 2003 or higher
Run Adprep.exe commands to prepare your existing forest and domains for domain controllers that run Windows Server 2008 or Windows Server 2008 R2. The adprep commands extend the Active Directory schema and update security descriptors so that you can add the new domain controllers.
There are different versions of Adprep.exe for Windows Server 2008 and Windows Server 2008 R2.
1. Prepare the forest and domains. There are three adprep commands to complete and have the changes replicate throughout the forest. Run the three commands as follows:
* Prepare the forest by running adprep /forestprep on the server that holds the schema master operations master (also known as flexible single master operations or FSMO) role to update the schema.
* Prepare the domain by running adprep /domainprep /gpprep on the server that holds the infrastructure operations master role.
* If you are installing an RODC in an existing Windows Server 2003 domain, you must also run adprep /rodcprep.
2. Install Active Directory Domain Services (AD DS). You can install AD DS by using a wizard, the command line, or an answer file.
Deploy at least one writable domain controller running Windows Server 2008 or Windows Server 2008 R2 in the same domain as the RODC and ensure that the writable domain controller is also a DNS server that has registered a name server (NS) resource record for the relevant DNS zone. An RODC must replicate domain updates from a writable domain controller running Windows Server 2008 or Windows Server 2008 R2.
