You deploy an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active
Directory as the attribute store.
Some users report that they fail to authenticate to the AD FS infrastructure.
You discover that only users who run third-party web browsers experience issues.
You need to ensure that all of the users can authenticate to the AD FS infrastructure successfully.
Which Windows PowerShell command should you run?
A.
Set-ADFSProperties -SSOLifetime 1:00:00
B.
Set-ADFSProperties -AddProxyAuthenticationRules None
C.
Set-ADFSProperties -ExtendedProtectionTokenCheck None
D.
Set-ADFSProperties -ProxyTrustTokenLifetime 1:00:00
Explanation:
http://technet.microsoft.com/en-us/library/hh237448%28WS.10%29.aspx
Correct.
To disable the Extended Protection for Authentication feature in AD FS 2.0
On a federation server, login using the Administrator account, open the Windows PowerShell command prompt, and then type the following command:
Set-ADFSProperties –ExtendedProtectionTokenCheck None
Repeat this step on each federation server in the farm.
0
0