The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a management solution for Server1 that meets the company’s security
requirements. What should you include in the recommendation?
Which RDP-Tcp settings should you configure?
Your network contains a server named Server1. Server1 has the Remote Desktop Session Host (RD
Session Host) role service installed. You need to ensure that when a user disconnects a Remote
Desktop connection, the connection is forcibly terminated after 30 minutes. Which RDP-Tcp settings
should you configure?
The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a solution for the file servers that meets the company’s technical
requirements. What should you include in the recommendation?
You need to ensure that Remote Desktop users can use the user interface elements of Windows Aero
Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Remote Desktop Session Host (RD Session Host) role service installed. You need to ensure that
Remote Desktop users can use the user interface elements of Windows Aero. What should you do
on Server1?
The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a solution for the new VMs that supports the company’s planned changes.
What should you recommend doing before the new VMs are deployed?
You need to limit the display quality of Remote Desktop connections
The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a solution for managing the GPOs that supports the company’s planned
changes. What should you include in the recommendation?
What should you modify from RemoteApp Manager?
Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
following Remote Desktop Services (RDS) role services installed: Remote Desktop Session Host (RD
Session Host)Remote Desktop Web Access (RD Web Access) You publish 10 RemoteApp programs on
Server1 by using RD Web Access. You need to ensure that when users log on to the RD Web Access
page, they see only the RemoteApp programs assigned to them. What should you modify from
RemoteApp Manager?
The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a security solution for the documents in the finance department. The
solution must meet the company’s security requirements. What should you include in the
recommendation?
You need to ensure that only client computers that have Windows Firewall enabled can connect to Remote Desktop
Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Remote Desktop Gateway (RD Gateway) role service installed. You add the Domain Users group to a
connection authorization policy named TS_CAP_01. You need to ensure that only client computers
that have Windows Firewall enabled can connect to Remote Desktop resources through the RD
Gateway. What should you do?