Your network contains an Active Directory domain named contoso.com. The domain functional level in Windows Server 2008. All domain controllers run Windows Server 2008 R2. The domain contains a file server named Served that runs Windows Server 2012.
Served has a BitLocker Drive Encryption (BitLocker)-encrypted drive. Served uses a trusted Platform Module (TPM) chip.
You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a Group Policy object (GPO).
You need to ensure that you can back up the BitLocker recovery information to Active Directory.
What should you do?
A.
Upgrade a domain controller to Windows 2012.
B.
Enable the Store BitLocker recovery information in the Active Directory Services (Windows Server2008 and Windows Vista) policy settings.
C.
Raise the forest functional level to Windows 2008 R2.
D.
Add a BitLocker data recovery agent
B.
Enable the Store BitLocker recovery information in the Active Directory Services (Windows Server2008 and Windows Vista) policy settings.
https://technet.microsoft.com/en-us/library/dd875529(v=ws.10).aspx
This applies to WS2008R2. We are trying to backup a recovery key for a WS2012 server.
It’s A.
“If you are not upgrading your domain controller to Windows Server 2012 you need to extend the schema to support this change. If Active Directory backup of the TPM owner authorization value is enabled in a Windows Server 2008 R2 environment without extending the schema, the TPM provisioning will fail and the TPM will remain in a Not Ready state for computers running Windows 8.”
https://technet.microsoft.com/en-us/library/jj635854.aspx
So either you extend the schema or you upgrade the DC.
Moreover:
“Backup theTPM Recovery Information to AD DS
Applies To: Windows 8, Windows 8.1, Windows Server 2012, Windows Server 2012 R2
….
Domain controllers running Windows Server 2012 R2 or Windows Server 2012 include the required AD DS schema objects by default. However, if your domain controller is running Windows Server 2008 R2, you need to update the schema ….
Check status of prerequisites
Before you begin your backup, ensure that the following prerequisites are met:
All domain controllers that are accessible by client computers that will be using TPM services are running Windows Server 2012 R2, Windows Server 2012, or Windows Server 2008 R2 with the updated schema…”
https://technet.microsoft.com/en-us/library/dn466534%28v=ws.11%29.aspx#BKMK_PreReqs
There is not a technically correct answer. The closest would be C. According to the documentation referenced in this post, B only applies if we are backing up 2008 or Vista, nothing later – we are backing up 2012. A can’t apply because we would need to upgrade ALL domain controllers to 2012 AND raise the domain functional level to 2012. C is only half correct. We would also need to add the schema extensions.
Correction, the correct answer is A. DC promotion in 2012 updates the schema automatically.
“With Server 2012, Adprep has been integrated into the Active Directory Domain Services (AD DS) role installation process.
Adprep is the utility—included in the OS installation media—that performs several crucial functions to upgrade AD to support that OS. The utility has three major options: /forestprep, /domainprep, and /rodcprep. The /forestprep option runs first, extending the AD schema with new object and attribute classes that the new AD version needs. The /domainprep option creates new well-known objects in AD, applies security changes, and miscellaneous other bits.”
http://windowsitpro.com/identity-management/windows-server-2012-simplifies-active-directory-upgrades-and-deployments
Answer B
https://technet.microsoft.com/en-us/library/dd875529(v=ws.10)
You can save recovery information in AD DS if your domain controllers are running Windows Server 2003 with Service Pack 1 (SP1) or Service Pack 2 (SP2), Windows Server 2003 R2, Windows Server 2008, or Windows Server 2008 R2.
You cannot save recovery information in AD DS if the domain controller is running a version of Windows Server earlier than Windows Server 2003 with SP1.
Answer D?
A: Can’t be because the schema does not need updating: From LWG link ‘If your domain controller is running Windows Server 2008 or Windows Server 2008 R2, you do not need to complete this procedure. These operating systems already include the necessary schema extension’
B: Can’t be because this is only for Bitlocker on Vista or Server 2008 machines: The link LWG provides also states that B is ‘To enable the local policy settings to back up BitLocker and TPM recovery information to AD DS from computers running Windows Vista or Windows Server 2008’
C: Can’t be because ‘BitLocker does not impose any requirements on domain or forest functional levels’
So D it is?: ‘Data recovery agents are accounts that are able to decrypt BitLocker-protected drives by using their smart card certificates and public keys. Recovery of a BitLocker-protected drive can be accomplished by a data recovery agent that has been configured with the proper certificate’
https://technet.microsoft.com/en-us/library/dd875529(v=ws.10)
ブランド時計,S品N品コピー 時計,時計 S品N品コピー,ブランド時計N級品
無料など取扱商品未使用を通販できます
「ドルチェ&ガッバーナ ベルト」検索結果です。
楽天市場は、セールや送料 数が日本最大級のインターネット通販サイト・オンラインショッピング コミュニティです。
(標準順 写真付き一覧)ブランド通販 DOLCE&GABBANAドルチェ＆ガッバーナ-ベルトの 商品一覧ページです。
新作からレアモデルまで、送料無料にて格安通販【スマホにも 対応】 販売中のDOLCE&GABBANAドルチェ＆ガッバーナのベルトは、全て自社で 在庫
ドルガバはベルトの下にあるカテゴリで商品は478点あります。
スマホで簡単 に出品・購入できるメルカリは、フリマ感覚でドルガバの中古
S品N品コピーブランド通販店(*^-^*)
S品N品コピーブランドメンズレディースファッション時計バッグ財布を海外通販！
S品N品コピーブランド激安ショッピングサイトです。
送料無料(日本全国)!
サポート体制も万全です。
スタイルが豊富で。
最新作も随時入荷いたしております。
ご安心購入くださいませ。
2017年春新作商品大好評中
★━┓＋┏━┓☆。
┃★┣━┫●┣━┓*
┗━┫○┣━┫◎┃
┗━┛ ┗━☆
* ＋ ＋*
ブランド靴の2017ブランド靴通販
評判第一、品質リリーフ最低価格保証
良い品質、低価格、評判最初の本当の写真
超N品フェンディフェンディの靴超N品
★最も人気のあるブランドの靴、ブランドの衣料品★
●随時、在庫情報を更新！
◆付属品の完全な！
◆100％、100％の品質保証！満足度を保証します！
◆全国送料無料
◆ご訪問、歓迎された顧客
時計特価品 http://www.copysale.net