You are the domain administrator for City Power & Light (http://ivww.cpandl.com), as introduced in the Troubleshooting Lab of Chapter 5. City Power & Light now has three Active Directory sites, as shown in Figure 6-11. The North and East sites have one domain controller each and the Main site has two domain controllers. All locations contain client computers running Microsoft Windows XP Professional. All servers running Microsoft Windows 2000 were upgraded to Windows Server 2003. The number of employees at each location has not changed.
City Power & Light still has a single Windows 2003 domain. There are three different offices in the Main location. These offices are named Accounting, Human Resources, and Operations. Each location (except Main) is also an office. The offices are named after their geographic location (North, South, East, and West).
Given this information, answer the following questions:
1. Each office with more than 100 users is allowed to hire its own network administrator. Network administrators should be allowed to create, delete, rename, reset, and manage the user accounts and computer accounts of those offices. Currently, the East, North, and Operations offices have more than 100 users apiece. What should you do?
2. The North, South, East, and West offices all require the same specialized software. However, none of the other offices require this software. What are ways in which you can organize the Active Directory structure to accommodate these requirements while distributing the software using Group Policy?
3. A total of 50 contracted employees are hired to work in the Operations office. They require different software than the rest of the users in the Operations office. Furthermore, the manager of the Operations office wants you to lock down specific portions of their desktops. The network administrator of the Operations OU needs your help. You must ensure that the network administrator of the Operations OU can manage these users and their computers. What should you do?
