###BeginCaseStudy###
Case Study: 20
Jazzy Records
COMPANY OVERVIEW
Jazzy Records has a main office and 10 branch offices.
PLANNED CHANGES
Jazzy Records plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the jazzyrecords.com forest.
Ensure that only the users in the funkslam.com accounting department can access the resources in
jazzyrecords.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Jazzy Records has many departments, including an accounting department.

Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named jazzyrecords.com and funkslam.com. Each
forest contains one domain.
All of the domain controllers in jazzyrecords.com run Windows Server 2008 R2. All of the domain
controllers in funkslam.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Jazzy Records must meet the following technical requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in tailspintoys.com can only access the shares in jazzyrecords.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend an IP addressing solution that meets the company’s technical
requirements. Which IPv6 prefix should you include in the recommendation?

###BeginCaseStudy###
Case Study: 20
Jazzy Records
COMPANY OVERVIEW
Jazzy Records has a main office and 10 branch offices.
PLANNED CHANGES
Jazzy Records plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the jazzyrecords.com forest.
Ensure that only the users in the funkslam.com accounting department can access the resources in
jazzyrecords.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Jazzy Records has many departments, including an accounting department.

Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named jazzyrecords.com and funkslam.com. Each
forest contains one domain.
All of the domain controllers in jazzyrecords.com run Windows Server 2008 R2. All of the domain
controllers in funkslam.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Jazzy Records must meet the following technical requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in tailspintoys.com can only access the shares in jazzyrecords.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend a document protection strategy that meets the company’s security
requirements. What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 20
Jazzy Records
COMPANY OVERVIEW
Jazzy Records has a main office and 10 branch offices.
PLANNED CHANGES
Jazzy Records plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the jazzyrecords.com forest.
Ensure that only the users in the funkslam.com accounting department can access the resources in
jazzyrecords.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Jazzy Records has many departments, including an accounting department.

Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named jazzyrecords.com and funkslam.com. Each
forest contains one domain.
All of the domain controllers in jazzyrecords.com run Windows Server 2008 R2. All of the domain
controllers in funkslam.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Jazzy Records must meet the following technical requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in tailspintoys.com can only access the shares in jazzyrecords.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to ensure that you can migrate objects from tailspintoys.com by using Active Directory
Migration Tool version 3.2 (ADMT v3.2). What should you do in tailspintoys.com?

###BeginCaseStudy###
Case Study: 20
Jazzy Records
COMPANY OVERVIEW
Jazzy Records has a main office and 10 branch offices.
PLANNED CHANGES
Jazzy Records plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the jazzyrecords.com forest.
Ensure that only the users in the funkslam.com accounting department can access the resources in
jazzyrecords.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Jazzy Records has many departments, including an accounting department.

Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named jazzyrecords.com and funkslam.com. Each
forest contains one domain.
All of the domain controllers in jazzyrecords.com run Windows Server 2008 R2. All of the domain
controllers in funkslam.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Jazzy Records must meet the following technical requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in tailspintoys.com can only access the shares in jazzyrecords.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend a solution for deploying the domain controllers in the branch offices. The
solution must meet the company’s security requirements. What should you recommend?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to ensure that you can migrate objects from cohowinery.com by using Active Directory
Migration Toot version 3.2 (ADMT v3.2). What should you do in cohowinery.com?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend an IP addressing solution that meets the company’s technical
requirements. Which IPv6 prefix should you include in the recommendation?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend a document protection strategy that meets the company’s security
requirements. What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend a NAP enforcement method for cohovineyard.com that meets the
company’s security requirements. Which NAP enforcement method should you recommend?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to recommend a solution for deploying the domain controllers in the branch offices. The
solution must meet the company’s security requirements. What should you recommend?

###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to ensure that you can migrate objects from cohowinery.com by using Active Directory
Migration Tool version 3.2 (ADMT v3.2). What should you do in cohowinery.com?