1. Describe the process of demoting a Domain Controller and the significance if it is the last DC in the domain or if it is not.

2. Describe the purpose for creating Active Directory sites and its advantages.

3. List the users and/or groups that have the local logon rights to a Domain Controller. In which security policy and GPO is this information/setting? What is the difference between explicitly assigning a user the local logon right to the DC and making the user a member of a group with the local logon right to the DC?

4. Explain in detail the roaming profile. Address the following points:

i. What is the purpose of a roaming profile?

ii. Settings that have to made, folders that have to be created, configuration of the folders.

iii. Describe the sequence of events when logging on as a user with a roaming profile as described in the Week 5 / Walkthrough 2 exercise but in your words.

iv. Describe what happens when logging on and the network resource for the roaming profile is not accessible.

v. Describe what happens when logging off and the network resource for the roaming profile is not accessible there was no exercise in the weekly walkthroughs, but you could simulate it. Logon with the roaming profile from XP then switch to Server 2008 and disable the share then logoff from XP.

vi. The advantages and disadvantages of roaming user profiles.

5. Describe the differences between AD DS (Active Directory Domain Services) vs. AD LDS (Active Directory Lightweight Directory Services).

6. What is the purpose for AD LDS (Active Directory Lightweight Directory Services)? In what situations might an organization choose to utilize AD LDS?

7. What security features does AD RMS (Active Directory Rights Management Services) offer? What are the requirements for using AD RMS, for both server and client?

8. Describe the purpose for using AD FS (Active Directory Federated Services). List and describe the components that are necessary for using AD FS.