In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it As a result. These questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution Determine whether the
solution meets the stated goals.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. Contoso com has the following configuration.
You plan to deploy an Active Directory Federation Services (AD FS) farm on Served and to
configure device registration. You need to configure Active Directory to support the planned
deployment.
Solution: You upgrade a domain controller to Windows Server 2016.
Does this meet the goal?
A.
Yes
B.
No
Explanation:
Windows Server 2016 Domain controller is required for Device Registration for Servers that run
Windows Server 2016.
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configuredevice-based-conditional-access-on-premises
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-device-based-conditional-access-on-premises
States the schema version needs to be above 85. 87 is 2016, and 69 is 2012 R2. I would say no because the schema version is not high enough.
The schema is automatically (or manually, before) extended during the 2016 DC installation.
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers
A. Yes
Why isn’t it high enough?
You stated it yourself. It needs to be above 85.
Windows 2016 is 87.
So if you upgrade a DC to 2016, then it has a version of 87 and that is higher then 85 right?