Start of repeated scenarioYou are an enterprise desktop support technician for Contoso, Ltd. IP AddressingContoso has one office. The IP addressing for Contoso is configured as shown in the following table.
Active Directory ConfigurationYou have an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2. An OU exists for each department in the company. The MainOffice Users and Computers OU contains the OUs for each department in the company. The Users OUs contains the user accounts for each department. The Computers OUs contain the computer accounts for each department. The Domain Controllers OU contains the computer accounts for all domain controllers. The Servers OU contains the computer accounts for all other servers. Custom Group Policy objects (GPOs) are linked to each departmental OU, the Domain Controllers OU, and the Servers OU. Server ConfigurationThe relevant servers are configured as shown in the following table. A year ago, a Windows Server 2008 R2 VPN server was deployed. Ten sales users participated in a pilot project to test the new VPN. The pilot project lasted two months. After the pilot project, the VPN server was put into production. The VPN server allows L2TP/IPSec-based VPN connections only. The VPN server requires certificate authentication. Printer ConfigurationNetwork printers are located in a single room on each floor. Users can search Active Directory to find printers that are nearby. Print1 is the print server for all printers. Client Computer ConfigurationMost users have desktop computers. Several users in the sales and management departments have portable computers because they travel frequently. All client computers run Windows 7 Enterprise. The Windows Internet Explorer proxy settings are configured on all client computers by using a GPO named GPO-IE. GPO-IE is linked to the domain. All users in the company use a custom application named App1. App1 is manually installed on all client computers. A new version of App1 is available. Some features in the new version of App1 are incompatible with the previous version of App1. End of repeated scenario The sales users that were part of the VPN server pilot project report that they can no longer establish VPN connections to the internal network. You need to ensure that all authorized users can establish VPN connections to the internal network. What should you request a domain administrator to do?
A.
Enable auto-renewal for certificates.
B.
Increase the lifetime of the Kerberos user ticket.
C.
Increase the lifetime of the Kerberos service ticket.
D.
Increase the certification validity period for the computer certificate template.