You are the domain administrator for TestKing's Active Directory domain. The
domain consists of four domain controllers named TestkingDC1, TestkingDC2,
TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000
Server and have the latest service pack installed. TestkingDC3 and TestkingDC4
run Windows Server 2003. All client computers run Windows XP Professional and
have the latest service pack installed.
You have a new client computer that you plan to use to perform domain
administration functions.
You need to be able to manage Active Directory users and computers remotely.
What should you do?（）

You are the network administrator for TestKing. The network consists of a single
Active Directory domain. All servers run Windows Server 2003.
The domain contains two domain controllers named Testking1 and Testking2. You
use a Windows XP Professional client computer named Client1.
In Active Directory, the domain administrator creates two new user accounts
named NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of the
Domain Admins global group. The AdminUser1 account is a member of only the
Users local group. You assign the AdminUser1 logon account the Allow log on
locally user right in the Default Domain Controller Group Policy object (GPO).
A new written security policy states that user accounts that are member of the
Domain Admins global group should not be used to log on to the console of a
domain controller. It also states that administrative tasks should be performed by
using the Secondary Logon service.
You need to create a new computer account in Active Directory, and you must
comply with the new company security policy.
What should you do?（）