###BeginCaseStudy###
Case Study: 2
Contoso, Ltd.
Scenario:
COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The
main office is located in Johannesburg. The branch offices are located in Brisbane and
Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection
to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will
have a domain controller, a DirectAccess server, a file server, and a Web server. All branch
office servers will be virtualized. Contoso plans to implement role-based access control for
all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the
following actions on the Hyper-V server:
• Start the VMs.
• View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file
server has two hard disks. One disk has the server’ s operating system installed and the other
disk stores data files. File server backups are performed regularly. The main office has a
Windows Server Update Services (WSUS) server. All client computers are configured to
receive updates from the WSUS server. The main office connects to each branch office by
using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active
Directory site exists for each office. Each Active Directory site contains three subnets. Each
subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS
Storage Requirements
Contoso must meet the following storage requirements:
• Improve data availability on the file servers.
• Improve the performance of the file servers.
• Limit each user’s storage space on the file servers to 2 GB.
• Prevent users from storing audio and video files on the file servers.
• Provide additional storage on the file servers without causing downtime.
• Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
• Minimize the potential attack surface.
• Minimize WAN link utilization between the offices.
• Minimize the number of server licenses purchased.
• Minimize server downtime caused by Applying updates.
• Minimize the amount of administrative effort required to approve the updates.
• Minimize the amount of time it takes for users in the branch offices to access files on
the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The
configurations for App1 can only be changed by editing the registry. Currently, a technician
must visit each client computer in the accounting department to change the App1
configurations.
###EndCaseStudy###
You need to recommend a solution for managing App1. The solution must require the minimum
amount of administrative effort. What should you include in the recommendation?
A.
Group Policy Administrative Templates
B.
Group Policy Preferences
C.
Group Policy Software Settings
D.
Windows Remote Management (WinRM)
Explanation:
Could be A or B, its down to which takes the least effort
http ://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changesthroughgroup-policy.aspx
Group Policy Templates (ADMX Files)
Administrative templates provide Group Policy setting information for the items that appear under
Administrative Templates. Group Policy tools use Administrative template files to populate policy
settings in the user interface. This allows administrators to manage registry-based policy settings.
Administrative templates provide Group Policy setting information for the items that appear under
Administrative Templates. Group Policy tools use Administrative template files to populate policy
settings in the user interface. This allows administrators to manage registry-based policy settings.
Administrative template files in Windows Server 2008
R2 and Windows 7 are divided into ADMX (language-neutral) and ADML (language-specific) files.
ADML files are XML-based ADM language files that are stored in a language-specific folder. By
default, the %Systemroot%\PolicyDefinitions folder on a local computer stores all ADMX files, and
ADML files for all languages that are enabled on the computer.
Group Policy Preferences
http ://technet.microsoft.com/en-us/library/cc731892%28WS.10%29.aspx
Group Policy preferences, new for the Windows Server 2008 operating system, include more than 20
new Group Policy extensions that expand the range of configurable settings within a Group Policy
object (GPO).
These new extensions are included in the Group Policy Management Editor window of the Group
Policy Management Console (GPMC), under the new Preferences item. Examples of the new Group
Policy preference extensions include folder options, mapped drives, printers, scheduled tasks,
services, and Start menu settings.
http ://support.microsoft.com/kb/943729
Examples of the new Group Policy preference extensions include the following:
Folder Options
Drive Maps
Printers
Scheduled Tasks
Services
Start Menu
The key difference between “Group Policy Preferences” and “Group Policies (settings)” is
enforcement. “Group Policies” enforce policy settings and prevent users from changing them. GroupPolicy Preferences does not (necessarily) enforce settings to machines/users, but merely applies the
settings as preferences.
“Group Policy Preferences” extend more than 20 Group Policy categories within a Group Policy
Object (GPO) and enable IT professionals to configure, deploy, and manage operating system and
application settings including mapped drives, scheduled tasks, power options, files and/or folders,
printers, folder options and Start menu settings for Windows Server 2008, Windows Vista, Windows
Server 2003, and Windows XP systems.
White Paper: http ://www.microsoft.com/downloads/info.aspx?
na=90&p=&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=42e30e3f-6f01-4610-
9d6ef6e0fb7a0790&u=http%3a%2f%2fdownload.microsoft.com%2fdownload%2fd%2fc%2fe%2fdce
0c60f-8c2e-40ad-94c3-020cd6d0db6d%2fGroup+Policy+Preferences.docx
GP Policy vs. Preference vs. GP preferences
worth a look:
http ://blogs.technet.com/b/grouppolicy/archive/2008/03/04/gp-policy-vs-preference-vs-gppreferences.aspx