###BeginCaseStudy###
Case Study: 21
Coho Vineyard
COMPANY OVERVIEW
Coho Vineyard has a main office and 10 branch offices.
PLANNED CHANGES
Coho Vineyard plans to implement the following changes:
• Assign IPv6 addresses to all client computers.
• Deploy domain controllers in the branch offices.
• Provide VPN access to all of the users in both forests.
• Deploy Network Access Protection (NAP) in the cohovineyard.com forest.
• Ensure that only the users in the cohowinery.com accounting department can access the
resources in cohovineyard.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Coho Vineyard has many departments, including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named cohovineyard.com and cohowinery.com.
Each forest contains one domain.
AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain
controllers in cohowinery.com run Windows Server 2003.
The forests and the domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office. REQUIREMENTS
Technical Requirements
Coho Vineyard must meet the following technical requirements:
• All IPv6 addresses must use a private IP address range.

• All IPv6 addresses must be routable between offices only.
Security Requirements
• Coho Vineyard must meet the following security requirements:
• Ensure that client computers do not require certificates.
• Prevent certain users from printing confidential documents and forwarding the documents
by e-mail.
• Prevent administrator passwords from being replicated to the domain controllers in the
branch offices.
• Control remote access to client computers that use static IP addresses and dynamicallyassigned IP addresses.
• Quarantine the local client computers and the remote client computers that do not have the
latest Windows updates installed.
• Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to
which they have explicit permissions.
• Ensure that all of the users who run Microsoft Office Outlook can perform global address list
(GAL) lookups on a server in their local office.
###EndCaseStudy###

You need to ensure that you can migrate objects from cohowinery.com by using Active Directory
Migration Tool version 3.2 (ADMT v3.2). What should you do in cohowinery.com?

A.
Upgrade the primary domain controller (PDC) emulator to Windows Server 2008 R2.

B.
Run the Active Directory Preparation Tool (Adprep.exe).

C.
Raise the functional level of the domain.

D.
Convert all global groups to universal groups.