###BeginCaseStudy###
Case Study: 1
Consolidated Messenger
Scenario:
You are an enterprise desktop support technician for Consolidated Messenger.
Network Configuration
The company has three offices named Office1, Office2, and Office3. The offices connect to
each other over the Internet by using VPN connections. Each office has an 802.11g wireless
access point. All wireless access points are configured to use Radius01 for authentication.
Active Directory Configuration
The network contains one Active Directory domain named consolidatedmessenger.com. The
relevant organizational unit structure is shown in the following diagram.

The relevant Group Policy objects (GPOs) in the domain are configured as shown in the following table.

Applications
The relevant applications on the network are shown in the following table.

Server Configuration
The relevant servers are configured as shown in the following table.

Client Configuration
Each office has 500 desktop computers that run Windows 7 Enterprise. There are 250 mobile
users that travel regularly between all three offices. The mobile users have laptop computers
that run Windows 7 Enterprise. To prevent the spread of malware, the company restricts the
use of USB devices and only allows the use of approved USB storage devices.
Printers
The marketing group has several printers that are shared on File01. A shared printer name
Printer1 is a high-performance, black-and-white printer. A shared printer named Printer2 is a
high-definition, photo-quality, color printer. Printer2 should only be used to print marketing
brochures.
###EndCaseStudy###

The company purchases 500 USB flash drives from a new hardware vendor and distributes them to
the users. The help desk reports that the users are unable to access the new USB flash drives. You
need to ensure that users can save data on the USB flash drives. What should you do?

A.
Instruct the help desk to modify the BitLocker settings.

B.
Instruct the help desk to modify the Windows Defender settings.

C.
Request that an administrator modify the driver signing policy.

D.
Request that an administrator modify the device installation restriction policy.

Explanation:
Open Group Policy Management and edit the applicable GPO in your Active Directory.
Disable autorun:
Computer Configuration \ Administrative Templates \ Windows Components \ AutoPlay Policies
Turn off Autoplay: Enabled

Limit to approved devices:
Computer Configuration \ Administrative Templates \ System > Device Installation \ Device
Installation Restrictions Allow installation of devices that match any of these device IDs: (add the
corporate device)
Prevent installation of devices not described by other policy settings: Enabled