DRAG DROP
A company has offices in New York and Seattle. Project managers from each office are in the
NewYork_PM and Seattle_PM Active Directory security groups, respectively. You are planning to
store all active IT project resources for the Project Management Office in branch-specific folders in a
namespace. You need to ensure that project managers from each branch can see only folders from
that branch in the namespace. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order. (Use only actions that Apply.)

Answer:

Explanation:

DFS Services are available on all currently supported versions of Windows Server, but there are
significant improvements in the Windows Server 2008 editions. The DFS namespace client is
available for all currently supported versions of Windows, both client and server. Domain-based DFS
namespaces require the use of Active Directory.
DFS Namespaces
A DFS namespace is basically a place where you will have links to all your file shares. From an
administrator point of view, you should think of it as a folder structure where you keep the list of
target file shares. Your users will see it as a single share with many folders and they will have no idea
that they are navigating across a set of servers to get to the subfolders and files.

When configuring DFS, you have a choice of using a domain-based or a stand-alone namespace. If
you already have Active Directory deployed, you should consider using a domain-based namespace.
If you’re not using Active Directory, your only choice is a stand-alone one.
The main advantage of the domain-based namespaces is that your configuration will be stored in
Active Directory and you won’t have to rely on a single server to provide the namespace information
to your clients.
The path users refer to uses the name of the domain and it will not need to change because your
namespace server name changed (only if you change your domain name). With a stand-alone DFS,
that server name becomes part of the main path to the namespace.

There are also two domain-based DFS modes: Windows Server 2008 mode and Windows Server
2000 mode.
Windows Server 2008 mode (which requires Windows Server 2003 forest functional level, Windows
Server 2008 domain functional level and Windows Server 2008 running on all namespace servers)
includes support for more than 5,000 folders with targets per namespace and access-based
enumeration.
Adding Folders to the Namespace
After your create the namespace, you will add folders to it, specifying the associated folder target.
This means pointing to the actual file shares, making each one appear to users as a folder under the
namespace. Before you do that, you want to think long and hard about the folder structure you’re
creating. A basic goal of DFS is to create a stable infrastructure that will not constantly change on
your users.
Multiple Targets
It’s useful to have multiple copies of the same data stored in different file servers. One reason for
that is faulttolerance (if one server is unavailable, you can still access the other one). The other
reason is to choose the copy of the data that is closer to you. If you’re in a branch office and you
want to access a very large file, you would rather get a copy from a server in that branch.
It’s actually quite simple to add more folder targets to an existing folder or create the folder with
multiple targets initially. All you have to do is make sure that you provide the multiple targets for the
same folder in that namespace when you configure it.
DFS Replication
At this point, you’re probably thinking: How does the data get copied across multiple servers?
Well, Windows Server includes a component to replicate data between file servers in case you need
that. It’s called DFS-R (Distributed File System Replication). DFS-R was introduced with Windows
Server 2003 R2 (replacing the old NTFRS with many advantages). DFS-R can be used for both
domain-based and stand-alone DFS.
To replicate files between two (or more) shares, you need to create a replication group and specify a
few things like which servers will replicate (members) and what they will replicate (replicated
folders). DFS-R is aware of site topology. It also has options to control scheduling and the use of
bandwidth (throttling). DFS-R uses
Remote Differential Compression (RDC), meaning that only changes in the files are sent over the
network, not the entire file.

What does access-based enumeration do?

Access-based enumeration displays only the files and folders that a user has permissions to access. If
a user does not have Read (or equivalent) permissions for a folder, Windows hides the folder from
the user’s view.
This feature is active only when viewing files and folders in a shared folder; it is not active when
viewing files and folders in the local file system.
Access-based enumeration can be enabled or disabled by using Share and Storage Management
Access-based enumeration can be manually enabled or disabled on individual shared folders and
volumes by using Share and Storage Management. This snap-in is available after a folder or volume
has been shared. You can access Share and Storage Management in the File Services server role in
Server Manager, and in Administrative Tools. You can also install it manually in Server Manager by
adding the File Server role service to File Services.
There are two ways to enable and disable access-based enumeration by using Share and Storage
Management:
Share a folder or volume by using the Provision a Shared Folder Wizard. If you select the SMB
protocol on the Share Protocols page of the Provision a Shared Folder Wizard, the advanced settings
options on the SMB Settings page includes the option to enable access-based enumeration on the
shared folder or volume. (To see the advanced settings options, on the SMB Settings page of the
wizard, click Advanced).
Change the properties of an existing shared folder or volume. To change the properties of an existing
shared folder or volume, on the Shares tab of Share and Storage Management, click the shared
folder or volume, and then click Properties in the Action pane. The information under Advanced
settings displays whether accessbased enumeration is enabled. Click Advanced and then select or
clear the Enable access-based enumeration check box.