###BeginCaseStudy###
Case Study: 8
Fourth Coffee
Scenario:
You are an enterprise desktop support technician for Fourth Coffee. The network contains a
single domain named fourthcoffee.com.
Physical Environment
The company has three offices. The offices are configured as shown in the following table.
The relevant servers are configured as shown in the following table.
The Web1 server is accessible only through the URL http://web1.fourthcoffee.local
Application Configurations
Fourth Coffee deploys an application named App1 to users in the main office by using a
Group Policy object (GPO) named APP1Deploy. App1 requires that a drive named M be
mapped to
\\AppServer1\AppData$. App1 saves information on a local computer if drive M is
unavailable. All client computers have drive M.
Security Policy
The corporate security policy states that domain controllers can only be deployed in secure
data centers. Branch office 2 does not have a secure data center.
Client Configuration
All users connect remotely through VPN1. VPN1 is configured to accept only SSTP-based
VPN connections. All client computers receive IP configurations from DHCP. You recently
purchased 100 desktop computers from a new hardware vendor.
###EndCaseStudy###
The application support team reports that the App1 data of some users is not saved to AppServer1.
The team reports that the users deleted the mapped drive. You need to prevent the users from
deleting the mapped drive. Which settings should you request be modified in the APP1Deploy GPO?
A.
Administrative Templates
B.
AppLocker
C.
Group Policy Preferences
D.
Software Restriction Policies
Explanation:
A)
Administrative Templates
The Administrative Template files allow you to configure and manage registry-based Group Policy
settings.
They are Unicode text files with the extension .adm in Windows XP with SP2 and Windows Server
2003 with SP1, and XML files with the extensions .admx and .adml in Windows Vista and later
versions of Windows.Standard Administrative Templates are deployed with your Windows operating systems.
Administrative Templates display the registry settings that you can apply to your users’ computers in
your GPOs. Information in the templates populates the administrative interface in Group Policy
Object Editor, which you use to set secure registry-based policy information.
A number of standard templates automatically populate the Group Policy Object Editor, and you can
add or remove templates later. Developers can create custom templates as needed.
C)
Group Policy Preferences
You can use Group Policy preferences to better deploy and manage operating system and
application settings.
Group Policy preferences enable IT professionals to configure, deploy, and manage operating system
and application settings they previously were not able to manage using Group Policy. Examples
include mapped drives, scheduled tasks, and Start menu settings. For many types of operating
system and application settings, using Group Policy preferences is a better alternative to configuring
them in Windows images or using logon scripts.
Group Policy preferences can be used to implement settings which are “preferred” but not
mandatory. This enables IT professionals to deploy software (including Internet Explorer 8) in a
standardized initial configuration and still permit users to customize some aspects to their liking.