Your network contains an Active Directory forest named contoso.com. The forest contains a member server
named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.image:Img3-3.jpg
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You raise the forest functional level to Windows Server 2012 R2.
Does this meet the goal?
A.
Yes
B.
No
Explanation:
For a Windows Server 2012 R2 AD FS server, this solution would work. However, new installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85).
References: https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configuredevice-based-conditional-access-on-premises
I think thats the answer is A.AD FS 2016 can live together with a AD FS 2012.AD FS can accept device registration, and need the domain and forest level of at least 2012 R2.If have you raise the forest level you have raise firt the domain level
2
1
B. In order to install ADSF 2016 you need Schema to be updated. The provided solution doesn’t achieve this.
7
1
Agreed it is B, 2 things need to take place for it to be Yes:
1. DC of 2016 or 2016 schema version
2. Forest functional level must be raised to 2012 R2 or higher
3
3