###BeginCaseStudy###
Case Study 2 – Litware, Inc.
Overview
Litware, Inc. is an international pharmaceutical company that has 1,500 employees, including a
roaming sales staff of 30 users.
Litware has a main office and two branch offices. The main office is located in Montreal. The branch
offices are located in Toronto and Seattle. All of the offices connect to each other by using a WAN
link.
Existing Environment
Active Directory
The network contains one Active Directory forest named litware.com. The forest contains a single
domain.
All of the domain controllers reside in the Montreal and Toronto offices. All of the servers in the
forest run Windows Server 2012 R2.
Cloud Environment
Each user has a mailbox hosted in Microsoft Office 365. Directory synchronization is configured
between Active Directory and Office 365. Litware uses Windows Intune to manage the client
computers used by the remote sales users. Both cloud services use the same public domain of
litware.com.
Management Infrastructure
Litware has a deployment of Microsoft System Center 2012 R2 Configuration Manager.
The schema extensions for Configuration Manager are deployed.
The deployment contains one primary site. Configuration Manager clients are installed on all of the
physical client computers in the Montreal and Toronto offices.
The relevant custom collections and custom Client Device Settings objects are configured as
shown in the following table.
The collection of IDMIF and NOIDMIF files is enabled for the client computers. Auto-creation of
software metering rules is disabled.
The sales users use Windows Phone devices. The devices are managed by using Microsoft
Exchange Online.
Windows Server and Client Environment
The network contains the servers configured as shown in the following table.
Server4 is used only by the users in the Seattle office to provide access to line-of-business
applications.
Server5 is used only to provide the users in the Toronto office with access to personal virtual
desktops.
The disks on Server11 are configured as shown in the following table.
Server11 contains a copy of all the up-to-date Windows and Endpoint Protection definition updates
in a share named Updates.
The network contains the client computers configured as shown in the following table.
Each sales user has administrative privileges on their laptop. All other users do not have
administrative privileges on their computer.
Application Environment
The sales users use a third-party application named App1. App1 is installed by using a Windows
Installer (MSI) package and a Windows Installer transform (MST). App1 updates are released in
the MSP format.
Updates for x86 and x64 platforms are released separately.
Users in the Montreal office use several different versions of two applications named App2 and
App3. The applications are configured as shown in the following table.
Internet Connectivity
Each office has an Internet connection. Last month, Litware reconfigured its web proxies, enforcing
user authentication from all on-premises systems when connecting to the Internet.
Problem Statements
Litware identifies the following issues on the network:
– There are compatibility issues between the applications that run on
Server4.
– An older version of App1 runs on some of the laptops of the sales users.
– Since the reconfiguration of the web proxies, Server3 and Server21 can
no longer synchronize software updates.
Requirements
Business Goals
As much as possible, Litware wants to minimize the costs associated with purchasing hardware
and software.
Planned Changes
Litware plans to implement the following changes:
– Use Configuration Manager to manage all physical computers, tablets,
and phones.
– Integrate Microsoft Application Virtualization (App-V) 5.0 with Remote
Desktop Services (RDS) and Configuration Manager.
– Replace the laptops of the sales users with tablets that run Windows 81
RT and make all of the sales applications available through Remote Desktop.
General Requirements
Litware identifies the following general requirements:
– The amount of disk space used by virtual desktop infrastructure (VDI)-
based virtual machines must be minimized.
– The principle of least privilege must be used, whenever possible.
– Administrative effort must be minimized, whenever possible.
Application Requirements
Litware identifies the following application requirements:
– The Seattle office users must use RemoteApp to run all of their
applications. Usage of the applications must be tracked.
– All new applications must use App-V 5.0. Currently, App-V is not used
on RDS servers.
– App1 must be updated on the client computers of the sales users.
– App2 and App3 must be metered.
Device Requirements
Litware identifies the following device requirements:
– Windows Phone 8.1 devices are the only smart phones permitted to access
email on the Litware
network.
– No additional software must be installed on the Windows Phone devices
of the sales users.
– Only the sales users must be able to enroll their Windows 8.1 RT devices
for management.
Compliance Requirements
Litware identifies the following compliance requirements:
– The compliance of the client cache size for Configuration Manager must
be regularly evaluated by running a WMI query in the following format:
– Configuration Manager must be able to generate license reconciliation
reports for third-party applications installed on the desktop computers
in the Montreal office.
– Inventory of each Configuration Manager client in the Toronto office
must include the phone number and the extension of the office in which
the computer is located.
– Configuration Manager inventory of the Montreal office must include
photocopiers and a custom hardware WMI class for each client.
– The impact of Configuration Manager inventory and software metering on
the performance of client computers must be minimized.
– On the client computers in the Toronto office, client health autoremediation in Configuration Manager must be disabled.
Configuration Manager Requirements
Litware identifies the following requirements for Configuration Manager:
– Configuration Manager application packages and software update packages
must be stored on drive E of the distribution points. If drive E is full,
packages must be stored on a drive that has the most available disk space,
except for drive C.
– All WAN and Internet traffic caused by the installation of the
Configuration Manager clients, as well as the download of Endpoint
Protection definition files and software updates, must be minimized.
– Configuration Manager must be used to manage all of the physical client
computers and the mobile devices. RDS servers and virtual desktops will
not be managed by using Configuration Manager.
– Configuration Manager software update points must be configured to allow
synchronization and the download of software updates.
– The number of changes to the Configuration Manager Default Client
Settings must be minimized.
Server11 must be configured as a distribution point.
###EndCaseStudy###
Hotspot Question
You need to create a configuration item that will evaluate the compliance of the Configuration
Manager client cache size.
Which settings should you configure? To answer, select the appropriate options in the answer area.
Answer: 