###BeginCaseStudy###
Case Study: 4
Margie’s Travel
Scenario:
You are an enterprise desktop support technician for Margie’s Travel. Margie’s Travel is a
company that specializes in booking travel for large corporations. The company has a main
office in New York and operates a call center in New York and a call center in Los Angeles.
The company has 1,000 employees.
Active Directory Configuration
The network contains an Active Directory forest named margiestravel.com. The functional
level of the forest is Windows Server 2008 R2. The Active Directory sites are configured as
shown in the following table.

All sites connect to each other by using high-speed WAN links.
Server Configuration
The relevant servers are configured as shown in the following table.

Security Configuration
The relevant security settings for the domain are configured as shown in the following table.

The relevant network policies on the NPS servers and the RRAS servers are configured as
shown in the following table.

User Information
All client computers run Windows 7 Professional. Sales staff is located in the main office and
uses portable computers. All portable computers are members of the MargiesTravel\Wireless
group.
Application Configuration
Call center staff uses a custom application to book airline tickets. The application is packaged
as an MSI file and is signed by using a code signing certificate that was issued by CA3. The
application is published by using Group Policies.
###EndCaseStudy###

At 08:00 on a Tuesday morning, an administrator in Site 3 takes DC3 offline to update the server.
Users in Site 3 report that they cannot log on to their computers. The users receive the following
error message: “Your account has time restrictions that prevent you from logging on at this time.
Please try again later.” You need to ensure that all users can log on to their computers when DC3 is
offline for maintenance. Your solution must adhere to the corporate security policies. What should
you do?

A.
Modify the logon hours for all users in Site 3.

B.
Change the time zone settings for all client computers in Site 3 to UTC-05:00.

C.
Request that a second domain controller be deployed in Site 3.

D.
Request that the time zone settings for DC1 and DC2 be changed to UTC-08:00.