What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to recommend a solution for the file servers in the branch offices that meets the storage
Requirements. What should you include in the recommendation?
Which storage requirement is met by adding the hard disk drive and creating the striped volume?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You are evaluating whether to add an additional hard disk drive to each file server and create a
striped volume for the data files. Which storage requirement is met by adding the hard disk drive
and creating the striped volume?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to recommend a solution that enables User1 to perform the required actions on the
HyperV server. What should you include in the recommendation?
Which operating system should you identify?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to identify which operating system must be installed on the HyperV server in the new
branch office. Which operating system should you identify?
What should you recommend doing in the new branch office?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to recommend a Windows update strategy for the new branch office. What should you
recommend doing in the new branch office?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to recommend a solution that enables User1 to perform the required actions on the
Hyper-V server. What should you include in the recommendation?
What should you recommend for Branch2?
###BeginCaseStudy###
Case Study: 3
Baldwin Museum of Science
Scenario:
COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has
5,000 users. Branch1 has 1,000 users. The main office connects to Branch1 by using a WAN
link. The WAN link is highly saturated. The museum has a sales department. All of the users
in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT
Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named
baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com. All user accounts and
computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain.
The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown in the
exhibit. (Click the Case Study Exhibits button.)
Network Infrastructure
The network contains the following servers and Applications:
• Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows
Server 2008 SP2, or Windows Server 2008 R2.
• A custom Application named App1 that runs on all of the Application servers. App1 writes
events to the Application log.
• A line-of-business Application named App2 that requires Internet Explorer 6. All of the
users in the sales department run App2.
• File servers that run Windows Server 2008 R2.
The main office has the following:
• A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role
installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines
(VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared
Volume. Each VM runs Microsoft SQL Server 2008.
• A server named Server1 that hosts two shared folders named Sharel and Share2. Sharel
hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents
that are created by users in the sales department.
Administration Model
All users in Branch 1 are members of global groups and universal groups. The groups are
located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS
Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 wi and will be configured as a separate Active Directory site. Branch2 will be
configured to meet the following requirements:
• Minimize the cost of deploying new servers.
• Contain only client computers that run Windows 7.
• Connect to the main office by using a saturated WAN link.
• Contain only servers that run Windows Server 2008 R2. The servers will be configured as
either file servers or Web servers. The file shares on the file servers must be available if a
single file server fails.
In Branch2, if a single domain controller or a WAN link fails, users in the branch must be
able to:
• Change their passwords.
• Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
• Hardware and software costs must be minimized whenever possible.
• All VMs must be backed up twice a day.
• All VM backups must include the VM configuration information.
• Events generated by App1 must be stored in a central location.
• An administrator must be notified by e-mail when App1 generates an error.
• The number of permissions assigned to help desk technicians must be minimized.
• The help desk technicians must be able to reset the passwords and modify the membership
of all users in Branch1.
• If a user overwrites another user’s research document, the user must be able to recover a
previous version of the document.
• When users in the sales department work remotely, they must be able to access the files in
Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
• All scripts that run on production servers must be signed.
• Managers in Branch1 must be allowed to access the Internet at all times.
• Web site administrators must not be required to log on interactively to Web servers.
• Users in Branch1 must only be allowed to access the Internet between 12:00 and
13:00.
• Users and managers must be prevented from downloading executable files from the
Internet.
• Administration of the corporate Web sites must support all bulk changes and
scheduled content updates.
###EndCaseStudy###
You need to recommend a domain controller deployment strategy for Branch2 that meets the
museum’s technical requirements. What should you recommend for Branch2?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 3
Baldwin Museum of Science
Scenario:
COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has
5,000 users. Branch1 has 1,000 users. The main office connects to Branch1 by using a WAN
link. The WAN link is highly saturated. The museum has a sales department. All of the users
in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT
Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named
baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com. All user accounts and
computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain.
The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown in the
exhibit. (Click the Case Study Exhibits button.)
Network Infrastructure
The network contains the following servers and Applications:
• Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows
Server 2008 SP2, or Windows Server 2008 R2.
• A custom Application named App1 that runs on all of the Application servers. App1 writes
events to the Application log.
• A line-of-business Application named App2 that requires Internet Explorer 6. All of the
users in the sales department run App2.
• File servers that run Windows Server 2008 R2.
The main office has the following:
• A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role
installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines
(VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared
Volume. Each VM runs Microsoft SQL Server 2008.
• A server named Server1 that hosts two shared folders named Sharel and Share2. Sharel
hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents
that are created by users in the sales department.
Administration Model
All users in Branch 1 are members of global groups and universal groups. The groups are
located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS
Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 wi and will be configured as a separate Active Directory site. Branch2 will be
configured to meet the following requirements:
• Minimize the cost of deploying new servers.
• Contain only client computers that run Windows 7.
• Connect to the main office by using a saturated WAN link.
• Contain only servers that run Windows Server 2008 R2. The servers will be configured as
either file servers or Web servers. The file shares on the file servers must be available if a
single file server fails.
In Branch2, if a single domain controller or a WAN link fails, users in the branch must be
able to:
• Change their passwords.
• Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
• Hardware and software costs must be minimized whenever possible.
• All VMs must be backed up twice a day.
• All VM backups must include the VM configuration information.
• Events generated by App1 must be stored in a central location.
• An administrator must be notified by e-mail when App1 generates an error.
• The number of permissions assigned to help desk technicians must be minimized.
• The help desk technicians must be able to reset the passwords and modify the membership
of all users in Branch1.
• If a user overwrites another user’s research document, the user must be able to recover a
previous version of the document.
• When users in the sales department work remotely, they must be able to access the files in
Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
• All scripts that run on production servers must be signed.
• Managers in Branch1 must be allowed to access the Internet at all times.
• Web site administrators must not be required to log on interactively to Web servers.
• Users in Branch1 must only be allowed to access the Internet between 12:00 and
13:00.
• Users and managers must be prevented from downloading executable files from the
Internet.
• Administration of the corporate Web sites must support all bulk changes and
scheduled content updates.
###EndCaseStudy###
You need to recommend a highavailability solution for the file servers in Branch2 that supports the
museum’s planned changes. What should you include in the recommendation?
What should you recommend?
###BeginCaseStudy###
Case Study: 3
Baldwin Museum of Science
Scenario:
COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has
5,000 users. Branch1 has 1,000 users. The main office connects to Branch1 by using a WAN
link. The WAN link is highly saturated. The museum has a sales department. All of the users
in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT
Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named
baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com. All user accounts and
computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain.
The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown in the
exhibit. (Click the Case Study Exhibits button.)
Network Infrastructure
The network contains the following servers and Applications:
• Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows
Server 2008 SP2, or Windows Server 2008 R2.
• A custom Application named App1 that runs on all of the Application servers. App1 writes
events to the Application log.
• A line-of-business Application named App2 that requires Internet Explorer 6. All of the
users in the sales department run App2.
• File servers that run Windows Server 2008 R2.
The main office has the following:
• A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role
installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines
(VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared
Volume. Each VM runs Microsoft SQL Server 2008.
• A server named Server1 that hosts two shared folders named Sharel and Share2. Sharel
hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents
that are created by users in the sales department.
Administration Model
All users in Branch 1 are members of global groups and universal groups. The groups are
located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS
Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 wi and will be configured as a separate Active Directory site. Branch2 will be
configured to meet the following requirements:
• Minimize the cost of deploying new servers.
• Contain only client computers that run Windows 7.
• Connect to the main office by using a saturated WAN link.
• Contain only servers that run Windows Server 2008 R2. The servers will be configured as
either file servers or Web servers. The file shares on the file servers must be available if a
single file server fails.
In Branch2, if a single domain controller or a WAN link fails, users in the branch must be
able to:
• Change their passwords.
• Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
• Hardware and software costs must be minimized whenever possible.
• All VMs must be backed up twice a day.
• All VM backups must include the VM configuration information.
• Events generated by App1 must be stored in a central location.
• An administrator must be notified by e-mail when App1 generates an error.
• The number of permissions assigned to help desk technicians must be minimized.
• The help desk technicians must be able to reset the passwords and modify the membership
of all users in Branch1.
• If a user overwrites another user’s research document, the user must be able to recover a
previous version of the document.
• When users in the sales department work remotely, they must be able to access the files in
Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
• All scripts that run on production servers must be signed.
• Managers in Branch1 must be allowed to access the Internet at all times.
• Web site administrators must not be required to log on interactively to Web servers.
• Users in Branch1 must only be allowed to access the Internet between 12:00 and
13:00.
• Users and managers must be prevented from downloading executable files from the
Internet.
• Administration of the corporate Web sites must support all bulk changes and
scheduled content updates.
###EndCaseStudy###
You need to recommend an administrative solution for the help desk technicians that meets the
museum’s technical requirements. What should you recommend?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 3
Baldwin Museum of Science
Scenario:
COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has
5,000 users. Branch1 has 1,000 users. The main office connects to Branch1 by using a WAN
link. The WAN link is highly saturated. The museum has a sales department. All of the users
in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT
Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named
baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com. All user accounts and
computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain.
The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown in the
exhibit. (Click the Case Study Exhibits button.)
Network Infrastructure
The network contains the following servers and Applications:
• Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows
Server 2008 SP2, or Windows Server 2008 R2.
• A custom Application named App1 that runs on all of the Application servers. App1 writes
events to the Application log.
• A line-of-business Application named App2 that requires Internet Explorer 6. All of the
users in the sales department run App2.
• File servers that run Windows Server 2008 R2.
The main office has the following:
• A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role
installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines
(VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared
Volume. Each VM runs Microsoft SQL Server 2008.
• A server named Server1 that hosts two shared folders named Sharel and Share2. Sharel
hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents
that are created by users in the sales department.
Administration Model
All users in Branch 1 are members of global groups and universal groups. The groups are
located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS
Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 wi and will be configured as a separate Active Directory site. Branch2 will be
configured to meet the following requirements:
• Minimize the cost of deploying new servers.
• Contain only client computers that run Windows 7.
• Connect to the main office by using a saturated WAN link.
• Contain only servers that run Windows Server 2008 R2. The servers will be configured as
either file servers or Web servers. The file shares on the file servers must be available if a
single file server fails.
In Branch2, if a single domain controller or a WAN link fails, users in the branch must be
able to:
• Change their passwords.
• Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
• Hardware and software costs must be minimized whenever possible.
• All VMs must be backed up twice a day.
• All VM backups must include the VM configuration information.
• Events generated by App1 must be stored in a central location.
• An administrator must be notified by e-mail when App1 generates an error.
• The number of permissions assigned to help desk technicians must be minimized.
• The help desk technicians must be able to reset the passwords and modify the membership
of all users in Branch1.
• If a user overwrites another user’s research document, the user must be able to recover a
previous version of the document.
• When users in the sales department work remotely, they must be able to access the files in
Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
• All scripts that run on production servers must be signed.
• Managers in Branch1 must be allowed to access the Internet at all times.
• Web site administrators must not be required to log on interactively to Web servers.
• Users in Branch1 must only be allowed to access the Internet between 12:00 and
13:00.
• Users and managers must be prevented from downloading executable files from the
Internet.
• Administration of the corporate Web sites must support all bulk changes and
scheduled content updates.
###EndCaseStudy###
You are planning to upgrade the client computers of the users in the sales department to Windows
7. You need to recommend an upgrade solution to ensure that the client computers can run App2.
What should you include in the recommendation?