Does this meet the goal?

Note: This question is part of a series of a questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some questions sets might have more than
one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will
not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server
named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device
registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?

Note: This question is part of a series of a questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some questions sets might have more than
one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will
not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server
named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device
registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?

A.
Yes

B.
No

Explanation:
Adprep just prepares the domain for Window Server 2016, it does not actually raise the domain functional level
to Windows Server 2016, which is required for Device Registration.
Note: Adprep.exe is a command-line tool that is included on the installation disk of each version of Windows
Server. Adprep.exe performs operations that must be completed on the domain controllers that run in an
existing Active Directory environment before you can add a domain controller that runs that version of Windows
Server.
Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that
run Windows Server 2012 or later. The commands need to run in the following cases:
* Before you add the first domain controller that runs a version of Windows Server that is later than the latest
version that is running in your existing domain.
* Before you upgrade an existing domain controller to a later version of Windows Server, if that domain
controller will be the first domain controller in the domain or forest to run that version of Windows Server.

https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-device-basedconditional-access-on-premises



Leave a Reply 2

Your email address will not be published. Required fields are marked *


PauliusP

PauliusP

Answer is Yes.

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-requirements

Look for Domain functional-level requirements and Schema requirements. 2008 or higher domain functional level required > we have 2008R2.

adprep.exe will upgrade AD schema to meet the requirement of schema version 85 or higher.

At least one Windows Server 2016 domain controller is required for Microsoft Passport for Work > we do not have statement that Microsoft Passport for Work is necessary.

Correct me if I am wrong.