单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords. You need to force all users in the Sales department to reset their passwords. What should you do?（）

单项选择题 You are responsible for administering the Production OU. You are assigned the Allow - Full Control permission for the OU. All computer objects in the Production OU are administered by another administrator named Tom. The Production OU contains the computer account for a Windows Server 2003 computer named Testking1. Tom submits a list of configuration settings that he wants to apply to Testking1 by means of a Group Policy object (GPO). A GPO that contains Toms required settings is created in another OU by the domain administrator. You only want to allow Tom to link existing GPOs to the Production OU. He must not have any more rights than he needs to perform the required tasks. What should you do?（）

多项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A new management directive states that users can log to the domain only during business hours. Users who remain logged on after business hours must be automatically disconnected from network resources. You need to enforce this directive by using the minimum amount of administrative effort. Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)