You need to configure a Group Policy object (GPO) that meets the security requirements of the users inthe
New York office.
Which Group Policy settings should you configure?
Overview
Proseware, Inc. is an independent software vendor. The company has a main office and two branch offices.
The main office is located in New York. The branch offices are located in London and Moscow.
Existing Environment
The New York office and the London office each contain the following servers that run Windows Server
2008 R2:
One Windows Deployment Services (WDS) server
One Remote Desktop Session Host (RD Session Host) server
Each office contains client computers that run Windows XP.
The London office and the New York office connect to each other by using a high-speed WAN link. The
Moscow office and the New York office connect to each other by using a low-speed, high-latency WAN link.
The network connection between the Moscow office and the New York office frequently fails.
Requirements
Planned Changes
The company plans to implement the following changes:
Migrate all of the client computers to Windows 8.
Deploy new applications named App1, App2, and App3.
Deploy a Virtual Desktop Infrastructure (VDI) in the New York office.
Deploy a Windows Server Update Services (WSUS) infrastructure.
Migration Requirements
The company identifies the following migration requirements:
Migrate the client computers to Windows 8 by using the Microsoft Deployment Toolkit (MDT).
Replace the client computers in the New York office. Migrate the user settings during the migration tothe
new hardware.
Ensure that the client computers in the London office that are not PXE-capable can download images from
WDS.
Reformat the existing disks in the London office during the migration to Windows 8.
Avoid using the WAN link between the Moscow and NewYork offices whenever possible.
Avoid deploying any servers to the Moscow office.
Virtual Desktop Infrastructure (VDI) Requirements
The company identifies the following VDI requirements:
Automatically provision new virtual desktops based on a virtual desktop template. The new virtual desktops
will run Windows 8.
Automatically discard any user changes to the new virtual desktops when the users log off.
Deploy a 3D graphics application named App1 to all of the new virtual desktops. App1 will require DirectX
11 support.
Ensure that updates for App1 are applied to all of the new virtual desktops.
Application Requirements
The company identifies the following application requirements:
In the New York office, deploy an application namedApp2 to the client computers that run Windows 8.
Minimize the amount of resources used by App2 on the client computers.
In the London office, publish an application named App3 to the Work Resources (RADC) area of the
Windows 8 Apps screen.
Security Requirements
The company identifies the following security requirements:
Ensure that updates for the New York, London, and Moscow offices can be approved only by the
administrators in the New York office.
Ensure that the users in the New York office can use only classes of USB devices that are approved by the
IT department.
Configure the replication of updates between the update servers in the New York and London offices.
A.
Allow installation of devices that match any of these device setup classes
Prevent installation of devices not described by other policy settings
B.
All Removable Storage classes: Deny all access
Prevent installation of devices not described by other policy settings
C.
Allow installation of devices that match any of these device setup classes
Prevent installation of devices using drivers that match these device setup classes
D.
All Removable Storage classes: Deny all access
Prevent installation of devices using drivers that match these device setup classes