###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2

The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###

You need to recommend a strategy for App1 that supports the company’s planned changes.
What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to plan an authentication solution for remote access that meets the company’s technical
requirements. What should you include in the plan?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to recommend a solution for the Hyper-V servers that meets the company’s technical
requirements.
What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to recommend a hardware solution for the domain controllers in the branch offices.
The solution must meet the company’s technical requirements.
What should you recommend doing in each branch office?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to plan a solution for the service accounts that meets the company’s security
requirements.
What should you include in the plan?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to recommend an operating system for the planned Hyper-V servers in the main office.
The operating system must support the company’s planned changes and business requirements.
Which operating system should you recommend?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to recommend a solution for consolidating the Active Directory domains. The solution
must meet the company’s technical requirements.
What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 14
Fabrikam Inc
COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and 10 branch offices.
PLANNED CHANGES
Fabrikam plans to implement the following changes in the fabrikam.com domain:
In the main office, implement two Hyper-V servers.
Migrate all of the user accounts from research.fabrikam.com to fabrikam.com.
On the Hyper-V servers in the main office, deploy 20 virtual machines (VMs) that run Windows
Server 2008 R2.
In the perimeter network, implement a server that has the Routing and Remote Access service
(RRASJ role service installed.
EXISTING ENVIRONMENT
Fabrikam.com contains application servers that run either Windows Server 2003, Windows Server
2008 Service Pack 2 (SP2), or Windows Server 2008 R2. All of the application servers run services
that use domain user accounts as service accounts.
Each branch office contains the following servers:
A domain controller for fabrikam.com that runs a 32-bit version of Windows Server 2008 SP2
A member server that runs Windows Server 2008 R2 and has the Hyper-V server role installed
Business Goals
All proposed solutions must minimize hardware and software costs.
Existing Active Directory Environment

The network contains a single Active Directory forest. The forest contains two domains named
fabrikam.com and research.fabrikam.com.
An Active Directory site exists for each office.
The main office has three domain controllers for fabrikam.com that run Windows Server 2008 R2.
The relevant organizational units (OUs) and Group Policy objects (GPOs) for fabrikam.com are
configured as shown in the following table.

The Default Domain Policy GPO for fabrikam.com requires that the password for each user account
be changed every 30 days.
Existing Network Infrastructure
The network contains an internal network and a perimeter network that are separated by a firewall.
Only the perimeter network is accessible from the Internet.
All domain controllers are located in the internal network.
REQUIREMENTS
Technical Requirements
Fabrikam must meet the following technical requirements:
Minimize administrative effort.
Support the use of Hyper-V live migration.
Minimize the number of ports opened on all of the firewalls.
Ensure that the VMs are available if a single host server fails.
Minimize and control the amount of Active Directory replication traffic between the offices.
Ensure that the users in the branch offices always authenticate to a local server when they log on.
Ensure that the users are migrated to fabrikam.com can access the servers in research.fabrikam.com
by using their current permissions.
Security Requirements
Fabrikam must meet the following security requirements:
Ensure that the passwords for all service accounts expire every 60 days.
Maintain the current policy for changing the passwords of all other user accounts.
###EndCaseStudy###

You need to plan an authentication solution for remote access that meets the company’s technical
requirements.
What should you include in the plan?

###BeginCaseStudy###
Case Study: 15
Trey Research
COMPANY OVERVIEW
Trey Research is a data warehousing company that has three data centers named Datacenter1,
Datacenter2, and Datacenter3. The data centers are located in different cities.
Trey recently acquired another company named A. Datum Corporation.
PLANNED CHANGES
Several applications are installed on the internal network servers. Trey Research plans to make the
applications accessible to the users who work from home.
Trey Research plans to migrate all of the user accounts in the adatum.com and east.adatum.com
domains to treyreseach.com.
Trey Research plans to deploy smart cards to all of the users on the network.
Trey Research plans to deploy a document storage solution that meets the following requirements:
The solution must be accessible to all client computers by using a Web browser.
The solution must be able to notify administrators when sensitive documents are modified.
Trey Research plans to deploy a Failover Clustering solution to host a Web application named
WebAppl, WebAppl must meet the following requirements:
Remain available if a single server fails.
Remain available if a single data center fails.

EXISTING ENVIRONMENT
Business Goals
Changes to the environment must require minimal hardware and software costs.
Existing Active Directory Environment
The network contains two Active Directory forests named treyresearch.com and adatum.com. A
two-way forest trust exists between the forests.
Adatum.com contains two domains named adatum.com and east.adatum.com. Treyreasearch.com
contains a single domain.
The network contains an internal enterprise root certification authority (CA).
Existing Network Infrastructure
The network contains client computers that run either Windows 7 or a UNIX-based operating
system. Some users work from home on client computers that are members of a workgroup.
REQUIREMENTS
Technical Requirements
Trey Research must meet the following technical requirements:
Users who work from home must be able to use local print devices.
The amount of disk space used on the users’ home computers must be minimized.
Users who work from home must have the same desktop experience as users who are connected to
the internal network.
Users must be able to access the shares in the adatum.com domain after their user accounts are
migrated to treyresearch.com.
Security Requirements
Trey Research must meet the following security requirements:
If a user forgets his or her password, he or she must be able to reset the password on his or her own.
If a user forgets his or her smart card PIN, he or she must be able to reset the PIN on his or her own.
###EndCaseStudy###

You need to recommend a document storage solution that supports the company’s planned
changes.
What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 15
Trey Research
COMPANY OVERVIEW
Trey Research is a data warehousing company that has three data centers named Datacenter1,
Datacenter2, and Datacenter3. The data centers are located in different cities.
Trey recently acquired another company named A. Datum Corporation.
PLANNED CHANGES
Several applications are installed on the internal network servers. Trey Research plans to make the
applications accessible to the users who work from home.
Trey Research plans to migrate all of the user accounts in the adatum.com and east.adatum.com
domains to treyreseach.com.
Trey Research plans to deploy smart cards to all of the users on the network.
Trey Research plans to deploy a document storage solution that meets the following requirements:
The solution must be accessible to all client computers by using a Web browser.
The solution must be able to notify administrators when sensitive documents are modified.
Trey Research plans to deploy a Failover Clustering solution to host a Web application named
WebAppl, WebAppl must meet the following requirements:
Remain available if a single server fails.
Remain available if a single data center fails.

EXISTING ENVIRONMENT
Business Goals
Changes to the environment must require minimal hardware and software costs.
Existing Active Directory Environment
The network contains two Active Directory forests named treyresearch.com and adatum.com. A
two-way forest trust exists between the forests.
Adatum.com contains two domains named adatum.com and east.adatum.com. Treyreasearch.com
contains a single domain.
The network contains an internal enterprise root certification authority (CA).
Existing Network Infrastructure
The network contains client computers that run either Windows 7 or a UNIX-based operating
system. Some users work from home on client computers that are members of a workgroup.
REQUIREMENTS
Technical Requirements
Trey Research must meet the following technical requirements:
Users who work from home must be able to use local print devices.
The amount of disk space used on the users’ home computers must be minimized.
Users who work from home must have the same desktop experience as users who are connected to
the internal network.
Users must be able to access the shares in the adatum.com domain after their user accounts are
migrated to treyresearch.com.
Security Requirements
Trey Research must meet the following security requirements:
If a user forgets his or her password, he or she must be able to reset the password on his or her own.
If a user forgets his or her smart card PIN, he or she must be able to reset the PIN on his or her own.
###EndCaseStudy###

You need to recommend a technology that meets the company’s security requirements.
What should you recommend?