###BeginCaseStudy###
Case Study: 17
Graphic Design Institute, Case B
General Background
You are the systems administrator for the Graphic Design Institute (GDI). GDI is a private
liberal arts and technical college with campuses in multiple cities.
Technical Background
The campus locations, users, client computers, and servers are described in the following
table.

The campuses are connected by a fully meshed WAN.
The corporate network includes Active Directory Domain Services (AD DS). Domain
controllers are located on each campus.
GDI uses Microsoft Windows Deployment Server (WDS) to distribute images by using
Preboot Execution Environment (PXE). GDI builds images by using the Windows
Automated Installation Kit (WAIK).
GDI uses Microsoft Windows Server Update Services (WSUS) to distribute and manage
Windows security updates and software updates. All private client computers and portable
computers used by faculty and staff are members of the WSUS computer group named Staff.
All shared client computers are members of the WSUS computer group named
LabComputers. All faculty and staff users are members of the global security group named
GDI_Staff. All students are members of the global security group named GDI_Students.
Specific servers are configured as shown in the following table.

The main data center is located on the Boston campus. ADMX and ADML files are centrally
stored on BODC01.
All Charlotte servers reside in the CH_Servers organizational unit (OU). CHDATA01,
CHDATA02, CHDATA03, and CHDATA04 reside in the CH_FileServers OU.
CH_FileServers is a child OU of CH_Servers.

A Group Policy object (GPO) named ServerSettings App1ies Windows Internet Explorer
settings to all servers.
Business Requirements
After successful migrations to Windows Server 2008 R2 in Boston, New Haven, and
Tacoma, GDI plans to migrate its other campuses to Windows Server 2008 R2 in advance of
a full Windows 7 client computer deployment. Server deployment on the Austin campus must
be performed on weekends by using scheduled deployments. The post-migration environment
must meet the following business requirements:
• Maximize security
• Maximize data protection
• Maximize existing resources
• Minimize downtime
Technical Requirements
The post-migration environment must meet the following security requirements:
• All updates must be distributed by using WSUS.
• All critical updates must be installed as soon as possible.
• All drives on the Minneapolis campus servers must have Windows BitLocker Drive
Encryption enabled.
The post-migration environment must meet the following data protection requirements:
• All servers must have automated backup routines.
• All backups must be replicated to the Boston data center at the end of each business
week.
• The post-migration environment must meet the following resource requirements:
• Installations and recovery must be performed remotely.
• All department volumes on file servers must have NTFS quotas.
• Minimize download time for users who open Microsoft Office documents over the
WAN.
• Ensure that users’ files are always opened from the closest file server when available.
• Users’ files must be accessible by the same path from all campuses.
###EndCaseStudy###

You are planning the deployment of Windows Server 2008 R2 to CHDATA03 and CHDATA04. You
have the following requirements:
• Do not impact settings for CHDATA01 and CHDATA02.
• Apply Windows Server 2008 R2-specific settings to CHDATA03 and CHDATA04 after
migration.
• Ensure that the ServerSettings GPO does not apply to CHDATA03 and CHDATA04 after
migration.
You need to plan a strategy that meets the requirements. Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)

A.
Create a GPO named MigratedServers that contains the Windows Server 2008 R2 settings. Create
a WMI filter that targets Windows Server 2003 and link it to the MigratedServers GPO,

B.
Block inheritance on the CH_FileServers OU.

C.
Create a WMI filter that targets Windows Server 2003 and link it to the ServerSettings GPO.

D.
Enable loopback processing on the MigratedServers GPO.

E.
Link the MigratedServers GPO to the CH_FileServers OU.

F.
Create a GPO named MigratedServers that contains the Windows Server 2008 R2 settings. Create
a WMI filter that targets Windows Server 2008 R2 and link it to the MigratedServers GPO.

Explanation:

A WMI filter enables you to specify criteria that must be matched before the linked GPO is applied to
a computer. By letting you filter the computers to which the GPO applies, this reduces the need to
further subdivide your OUs in Active Directory. This technique is dynamic, in that the filter is
evaluated when the computer attempts to apply the policy. So if you are filtering based on the
version of Windows then upgrading the computer from Windows XP to Windows 7 requires no
changes to your GPO, because the filter will automatically recognize the change and filter the
computer’s access to the GPO accordingly.
I’ve just put the structure together in a DC and took a screen shot of it. this is how i interperate the
information given

It on the second page of the exhibit it says that the ServerSettings GPO applies to all servers not all
file servers. So that means one of two things, its linked to the CH_Servers OU OR its linked higher like
at a domain level because then it applies to ALL servers in all regions. as the full AD structure is not
clear I’ll assume its applied on all CH servers only, but either way if its applied at a domain level it
shouldn’t matter.
If you first carry out step F you create the MigratedServers GPO, then you create the Server 2008 R2
WMI filter and apply that to the GPO you just created, then you carry out step E which links the
MigratedServers GPO which has a Server 2008 R2 WMI filter to the CH_FileServers OU.
NOTE: possible issue
Thanks to SoK for highlighting this.
the question states what 2 steps
But requirement 3 says Ensure that the ServerSettings GPO does not apply to CHDATA03 and
CHDATA04 after migration.
So ServerSettings GPO applies IE settings to servers in the CH_Servers ou and will also be applied to
any Child OUs of that and on page 2 it says that CH_FileServers is a child of CH_servers so the
ServerSettings GPO will be applied to all file servers by default regardless of their OS. the settings are
IE settings and as its stands those settings would apply to CHDATA03 & CHDATA04 because of the
ServerSettings GPO so unless you block that GPO somehow reaching the two 2008 file servers,
answer B wont work because it then blocks them for CHDATA01 & CHDATA02 which you don’t want.
A wont work at it is an incorrect “replacement” for F because its applying 2008 settings to 2003
servers which is as useful as tits on a bull. D is pointless in this specific case so it a[[ears that C may
be required. I’m going to leave C out for the moment because the question clearly states 2 answers