###BeginCaseStudy###
Case Study: 14
School of Fine Art
Scenario
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite
campuses. The main campus is located in New York. The satellite campuses are located in
Los Angeles and Chicago. The main campus has approximately 4,000 users made up of
students, faculty, and employees. Each satellite campus has approximately 1,000 users made
up of students, faculty, and employees.
EXISTING ENVIRONMENT
The network contains a single Active Directory domain named fineartschool.net. All servers
run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.
The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise
Desktop Virtualization (MED-V).
Existing Network Infrastructure
The main campus has the following servers:
• A file server that contains confidential files
• A print server that has several printers installed
• A server that has the Windows Server Update Services (WSUS) server role installed
All client computers are updated by using the WSUS server. The main campus has a
computer lab. The lab has 50 client computers that run Windows 7 Enterprise. The computer
accounts for the lab computers are located in an organizational unit (OU) named LabOU. The
user accounts and computer accounts for all of the students are located in an OU named
StudentsOU. Both OUs are child objects in the fineartschool.net domain. The relevant Group
Policy objects (GPOs) are configured as shown in the following table.
REQUIREMENTS
Technical Requirements
The computer lab must meet the following requirements:
• Ensure that the user settings in all domain-level GPOs are App1ied to each student.
• Prevent the settings in all domain-level GPOs from being App1ied to the client computers
in the computer lab.
The update management infrastructure must meet the following requirements:
• Each campus must control the updates for its respective campus.
• Update status reports must be sent weekly to the Enterprise Administrator on the main
campus.
Application Requirements
All client computers will be upgraded to Windows 7 Enterprise. An Application named App1
runs on every client computer. App1 is only compatible with Windows XP. App1 must
remain available after all of the operating system upgrades are complete.
App1 must meet the following requirements:
• App1 must be available from the Start menu.
• The management of App1 must be centralized.
• Each user must have a unique instance of App1.
Security Requirements
Security for the file server on the main campus must meet the following requirements:
• Unauthorized users must be prevented from printing sensitive files stored on the server.
• The contents of the server* s hard disks must remain secure if the physical security of the
server is compromised.
Problem Statements
Users report that they receive a different desktop environment every time they log on to a
client computer in the computer lab. The print server on the main campus has reliability
issues. A malfunction on a single printer often causes other printers to malfunction.
###EndCaseStudy###
You need to recommend changes to the existing environment that meet the company’s security
requirements for the file server on the main campus. What should you recommend?
A.
Deploy Network Policy Server (NPS) and create a network policy.
B.
Deploy Print and Document Services and create a custom printer filter.
C.
Deploy File Server Resource Manager (FSRM) and create a file classification rule.
D.
Deploy Active Directory Rights Management Services (AD RMS) and create an AD RMS rights
policy template.
Explanation:
http ://technet.microsoft.com/en-us/library/dd996658%28WS.10%29.aspx
Rights policy templates are used to control the rights that a user or group has on a particular piece of
rightsprotected content. Active Directory Rights Management Services (AD RMS) stores rights policy
templates in the configuration database. Optionally, it may maintain a copy of all rights policy
templates in a shared folder that you specify.