Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 151:

  As part of a Windows Server 2008 R2 Active Directory deployment, you are designing a Group Policy object (GPO) hierarchy. Client computers run Windows 7 and Windows XP. All client computers are in an organizational unit (OU) named

  Client Computers.

  Additional Windows 7 and Windows XP client computers will be joined to the domain over the next six months.

  You have the following requirements:

  -

  Install the antivirus Application on all Windows XP computers.

  -

  Do not install the antivirus Application on the Windows 7 computers.

  -

  Do not make changes to the existing Active Directory logical structure.

  You need to design a Group Policy strategy that meets the requirements.

  Which GPO configuration should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Publish the antivirus application to client computers. Link the GPO to the domain. Use security filtering to prevent the Windows 7 client computers from receiving the GPO.
  B. Assign the antivirus application to client computers. Link the GPO to the Client Computers OU. Create a WMI Filter that queries whether the client computer's Win32_OperatingSystem caption contains "Windows 7" . Associate the WMI filter with the GPO.
  C. Assign the antivirus application to client computers. Link the GPO to the domain. Place all the Windows 7 computers in a security group. Use security filtering to prevent the Windows 7 client computers from receiving the GPO.
  D. Assign the antivirus application to client computers. Link the GPO to the Client Computers OU. Create a WMI Filter that queries whether the client computer's Win32_OperatingSystem caption contains "Windows XP" . Associate the WMI Filter with the GPO.
  D. Assign the antivirus application to client computers. Link the GPO to the Client Computers OU. Create a WMI Filter that queries whether the client computer's Win32_OperatingSystem caption contains "Windows XP" . Associate the WMI Filter with the GPO.

  ---

  http://technet.microsoft.com/en-us/library/cc947846%28v=ws.10%29.aspx and http://technet.microsoft.com/enus/library/cc947846%28v=ws.10%29.aspx#bkmk_1

  Depending on which OS you're asked to install the AV app on your answer could change. There are reports that you're now being asked to install the AV on the Win7 clients. if that is the case then you would select the Windows 7 option.

• Question 152:

  Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. Some users have laptop computers and work remotely from home.

  You need to plan a data provisioning infrastructure to secure sensitive files. Your plan must meet the following requirements:

  -

  Files must be stored in an encrypted format.

  -

  Files must be accessible by remote users over the Internet.

  - Files must be encrypted while they are transmitted over the Internet.

  What should you include in your plan?

  A. Deploy one Microsoft SharePoint Foundation 2010 site. Require users to access the SharePoint site by using a Secure Socket Transmission Protocol (SSTP) connection.
  B. Deploy two Microsoft SharePoint Foundation 2010 sites. Configure one site for internal users. Configure the other site for remote users. Publish the SharePoint sites by using HTTPS.
  C. Configure a Network Policy and Access Services (NPAS) server to act as a VPN server. Require remote users to access the files by using an IPsec connection to the VPN server.
  D. Store all sensitive files in folders that are encrypted by using Encrypting File System (EFS). Require remote users to access the files by using Secure Socket Transmission Protocol (SSTP).
  D. Store all sensitive files in folders that are encrypted by using Encrypting File System (EFS). Require remote users to access the files by using Secure Socket Transmission Protocol (SSTP).

  ---

  MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:

  Encrypting File System Encrypting File System (EFS) is another method through which you can ensure the integrity of data. Unlike BitLocker, which encrypts all data on a volume using a single encryption key that is tied to the computer, EFS allows for the encryption of individual files and folders using a public encryption key tied to a specific user account. The encrypted file can only be decrypted using a private encryption key that is accessible only to the user. It is also possible to encrypt documents to other user's public EFS certificates. A document encrypted to another user's public EFS certificate can only be decrypted by that user's private certificate.

  Security Groups cannot hold encryption certificates, so the number of users that can access an encrypted document is always limited to the individual EFS certificates that have been assigned to the document. Only a user that originally encrypts the file or a user whose certificate is already assigned to the file can add another user's certificate to that file. With EFS there is no chance that an encrypted file on a departmental shared folder might be accessed by someone who should not have access because of incorrectly configured NTFS or Shared Folder permissions. As many administrators know, teaching regular staff to configure NTFS permissions can be challenging. The situation gets even more complicated when you take into account Shared Folder permissions. Teaching staff to use EFS to limit access to documents is significantly simpler than explaining NTFS ACLs.

  If you are considering deployment of EFS throughout your organization, you should remember that the default configuration of EFS uses self-signed certificates. These are certificates generated by the user's computer rather than a Certificate Authority and can cause problems with sharing documents because they are not necessarily accessible from other computers where the user has not encrypted documents. A more robust solution is to modify the default EFS Certificate Template that is provided with a Windows Server 2008 Enterprise Certificate Authority to enable autoenrollment. EFS certificates automatically issued by an Enterprise CA can be stored in Active Directory and applied to files that need to be shared between multiple users.

  Another EFS deployment option involves smart cards. In organizations where users authenticate using smart cards, their private EFS certificates can be stored on a smart card and their public certificates stored within Active Directory. You can learn more about configuring templates for autoenrollment in Chapter 10, "Certificate Services and Storage Area Networks."

  MORE INFO More on EFS For more information on Encrypting File System in Windows Server 2008, consult the following

  TechNet article: http://technet2.microsoft.com/windowsserver2008/en/library/f843023b-bedd-40dd9e5b-f1619eebf7821033.mspx?mfr=true.

  Quick Check

  1.

  From a normal user's perspective, in terms of encryption functionality, how does EFS differ from BitLocker?

  2.

  What type of auditing policy should you implement to track access to sensitive files?

  Quick Check Answers

  1.

  BitLocker works on entire volumes and is transparent to the user. EFS works on individual files and folders and be configured by the user.

  2.

  Auditing Object Access.

  Windows Server 2008 VPN Protocols

  Windows Server 2008 supports three different VPN protocols: Tunneling Protocol (PPTP), Layer Two Tunneling Protocol over IPsec (L2TP/IPsec), and Secure Socket Tunneling Protocol (SSTP).

  The factors that will influence the protocol you choose to deploy in your own network environment include client operating system, certificate infrastructure, and how your organization's firewall is deployed.

  Windows XP remote access clients, because these clients cannot use SSTP

  SSTP Secure Socket Tunneling Protocol (SSTP) is a VPN technology that makes its debut with Windows Server 2008. SSTP VPN tunnels allow traffic to pass across firewalls that block traditional PPTP or L2TP/IPsec VPN traffic. SSTP

  works by encapsulating Point-to-Point Protocol (PPP) traffic over the Secure Sockets Layer (SSL) channel of the Secure Hypertext Transfer Protocol (HTTPS) protocol. Expressed more directly, SSTP piggybacks PPP over HTTPS. This

  means that SSTP traffic passes across TCP port 443, which is almost certain to be open on any firewall between the Internet and a public-facing Web server on an organization's screened subnet.

  When planning for the deployment of SSTP, you need to take into account the following

  considerations:

  SSTP is only supported with Windows Server 2008 and Windows Vista with Service Pack 1.

  SSTP requires that the client trust the CA that issues the VPN server's SSL certificate.

  The SSL certificate must be installed on the server that will function as the VPN server prior to the installation of Routing and Remote Access; otherwise, SSTP will not be available.

  The SSL certificate subject name and the host name that external clients use to connect to the VPN server must match, and the client Windows Vista SP1 computer must trust the issuing CA.

  SSTP does not support tunneling through Web proxies that require authentication.

  SSTP does not support site-to-site tunnels. (PPTP and L2TP do.)

  MORE INFO More on SSTP

  To learn more about SSTP, see the following SSTP deployment walkthrough document at http://download.microsoft.com/download/b/1/0/b106fc39-936c-4857-a6ea-3fb9d1f37063/ Deploying%20SSTP %20Remote%20Access%20Step%20by

  %20Step%20Guide.doc.

• Question 153:

  You are testing a file replication strategy for the IT Budget folders on BODATA01, NEDATA01, and TADATA01. The IT Budget folder on TADATA01 is the primary member.

  You need to force replication of files to the Boston campus as soon as possible.

  Which command should you execute?

  A. dfsrdiag.exe PollAO /Member:GD!\BODC01
  B. dfsrdiag.exe PollAD /Member:GDI\TADC01
  C. dfsrdiag.exe PollAD /Member:GDI\TADATA01
  D. dfsrdiag.exe PollAD /Member:GDI\BODATA01
  B. dfsrdiag.exe PollAD /Member:GDI\TADC01

  ---

  You are testing a file replication strategy on BODATA01. if you look at http://technet.microsoft.com/en-us/library/cc771488.aspx its says You can use DFS Replication to keep the contents of folder targets in sync so that users see the same files regardless of which folder target the client computer is referred to. if you look to the Note on the bottom of the page its says:

  To poll immediately for configuration changes, open a command prompt window and then type the following command once for each member of the replication group: dfsrdiag.exe PollAD /Member:DOMAINServer1.

  So the question is do you poll the server holding the files or the DC in the location where the primary member is located? I'm pretty sure DFS-Replication uses AD DS replication so to me anyway I'd poll the DC.

• Question 154:

  Your network consists of a single Active Directory domain. The domain controllers run Windows Server 2008 R2. Your company's enterprise security policy states that the domain controllers cannot contain optical drives.

  You need to recommend a backup and recovery plan that restores the domain controllers in the event of a catastrophic server failure.

  What should you recommend?

  A. Use Windows Server Backup to back up each domain controller to a local disk. Create a Windows Recovery Environment (Windows RE) partition on each domain controller.
  B. Use Windows Server Backup to back up each domain controller to a local disk. Use Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE).
  C. Use Windows Server Backup to back up each domain controller to a remote network share. Create a Windows Recovery Environment (Windows RE) partition on each domain controller.
  D. Use Windows Server Backup to back up each domain controller to a remote network share. Use Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE).
  D. Use Windows Server Backup to back up each domain controller to a remote network share. Use Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE).

  ---

  http://technet.microsoft.com/en-us/library/cc766048(WS.10).aspx

  http://technet.microsoft.com/en-us/library/cc765966(v=WS.10).aspx (Must Read)

  http://technet.microsoft.com/en-us/magazine/2008.10.desktopfiles.aspx

  Special considerations

  You must be a member of the Administrators group or Backup Operators group to use Windows ver Backup.

  In Windows Server 2008, the firewall has been enabled by default. If you are managing the backups of another computer using the Windows Server Backup snap-in, your connectivity to the remote computer may be affected and can be

  resolved by changes in the firewall rules.

  While working on the local computer, you are not affected.

  Also, if you are a current user of the previous backup feature (Ntbackup.exe) that shipped in earlier versions of Windows, and plan to switch to the new Windows Server Backup, you might be affected by the following issues and changes:

  Settings for creating backups will not be upgraded when you upgrade to Windows Server 2008. You will need to reconfigure settings.

  You will need a separate, dedicated disk for running scheduled backups.

  Only NTFS-formatted volumes on a locally attached disk can be backed up.

  You can no longer back up to tape. (However, support of tape storage drivers is still included in Windows Server 2008.) Windows Server Backup supports backing up to external and internal disks, DVDs, and shared folders.

  You cannot recover backups that you created with Ntbackup.exe by using Windows Server Backup. However, a version of Ntbackup.exe is available as a download to Windows Server

  2008 for users who want to recover data from backups created using Ntbackup.exe. The downloadable version of Ntbackup.exe is only for recovering backups for older versions of Windows and cannot be used to create new backups in

  Windows Server 2008.

  Windows Server 2008 R2 including:

  The ability to backup System State as a separate job as well as the ability to do incremental System State backups.

  The ability to exclude specific file types, file folders, and specific files instead of having to backup an entire volume.

  The ability to backup to a volume or a network share instead of requiring a dedicated disk for backups.

  Windows Recovery Technical Reference

  Windows Recovery Environment (Windows RE) is an extensible recovery platform based on Windows Preinstallation Environment (Windows PE). When the computer fails to start, Windows automatically fails over into this environment, and

  the Startup Repair tool in Windows RE automates the diagnosis and repair of an unbootable Windows Vista installation. Furthermore, Windows RE is a starting point for various tools for manual system recovery. The primary audience of this

  technology includes original equipment manufacturers (OEMs), original device manufacturers (ODMs), and corporate IT professionals.

  Image-based Recovery from Windows RE

  In the event that the Windows installation cannot be repaired with Startup Repair or other manual repair steps, Windows RE can be used to launch an image-based recovery tool.

  User-created Recovery Image

  Windows Vista provides end users with the ability to create a backup image of their entire operating system.

  End users can do this by using the Backup tool. The system image can be stored on an external hard disk, on a hard disk partition other than those imaged, or on a DVD. To restore the computer by using this system image, users must

  launch the restore interface from the list of Windows RE manual tools.

  Factory-created Recovery Image

  To facilitate restoring a computer to its factory state, a recovery image can be placed on the Windows RE partition. This eliminates the need for a separate recovery media in most cases.

  If the Windows image format is used in the manufacturing process, the same operating system image can be used for recovery as well. A computer manufacturer can develop an application by using the Imaging APIs for Windows and the

  Windows image to restore the operating system volume. This application can be launched from the Windows RE user interface (UI) by using customizations provided by the ODM.

• Question 155:

  You need to recommend a management solution for the corporate Web sites that meets the museum's security policy. What should you include in the recommendation?

  A. Internet Information Services (IIS) Manager
  B. Remote Desktop Services (RDS)
  C. Remote Server Administration Tools (RSAT)
  D. Windows PowerShell 2.0
  D. Windows PowerShell 2.0

  ---

  RSAT isnt right because that will give them access to other tools they do not need. the admins are not required login in so that takes care of RDS because that means they MUST log on interactively, that leaves IIS and Powershell.

  PowerShell meets the requirements of the security policy, IIs wont

• Question 156:

  Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 R2 computers named Server1 and Server2. The company has two identical print devices. You plan to deploy print services. You need to plan a print services infrastructure to meet the following requirements:

  -Manage the print queue from a central location.

  -

  Make the print services available, even if one of the print devices fails. What should you include in your plan?

  A. Install and share a printer on Server1. Enable printer pooling.
  B. Install the Remote Desktop Services server role on both servers. Configure Remote Desktop Connection Broker (RD Connection Broker).
  C. Install and share a printer on Server1. Install and share a printer on Server2. Use Print Management to install the printers on the client computers.
  D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the cluster.
  A. Install and share a printer on Server1. Enable printer pooling.

  ---

  http://www.techrepublic.com/blog/datacenter/configure-printer-pooling-in-windows-server-2008/964

  Managing printers can be the bane of a Windows administrator. One feature that may assist you with this task is the Windows printer pooling feature. Windows Server 2008 offers functionality that permits a collection of multiple like-configured printers to distribute the print workload.

  Printer pooling makes one share that clients print to, and the jobs are sent to the first available printer. Configuring print pooling is rather straightforward in the Windows printer configuration applet of the Control Panel. Figure A shows two like-modeled printers being pooled.

  To use pooling, the printer models need to be the same so that the driver configuration is transparent to the end device; this can also help control costs of toner and other supplies. But plan accordingly -- you don't want users essentially running track to look for their print jobs on every printer in the office.

  

• Question 157:

  A company has client computers that run Windows 7. The company has Windows Server Update Services (WSUS) 3.0 with Service Pack 2 (SP2) deployed on a server that runs Windows Server 2008 R2.

  You are designing an update management solution for the company's client computers. The solution must meet the following requirements:

  -

  Client computers must use WSUS for the installation of updates.

  -

  Only administrators should receive update notifications from WSUS.

  You need to design an update management solution that meets the requirements.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Define the WSUS settings in the Computer Configuration area of the Group Policy Management Console.
  B. Define the WSUS settings in the User Configuration area of the Group Policy Management Console.
  C. Define the WSUS settings in the User Configuration area of the Local Group Policy on client computers.
  D. Define the WSUS settings in the Computer Configuration area of the Local Group Policy on client computers.
  A. Define the WSUS settings in the Computer Configuration area of the Group Policy Management Console.

  ---

  FROM Step by Step guide to setting up WSUS 3.0 SP2 http://technet.microsoft.com/en-us/library/cc708519%28v=ws.10%29 or

  http://blogs.microsoft.co.il/blogs/yanivf/archive/2007/09/23/install-wsus-3-0-stepby-step.aspx

  To configure Automatic Updates

  In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

  In the details pane, double-click Configure Automatic Updates.

  Click Enabled, and then click one of the following options:

  Notify for download and notify for install: This option notifies a logged-on administrative user before the download and before the installation of the updates.

  Auto download and notify for install: This option automatically begins downloading updates and then notifies a logged-on administrative user before installing the updates.

  Auto download and schedule the install: If Automatic Updates is configured to perform a scheduled installation, you must also set the day and time for the recurring scheduled installation.

  Allow local admin to choose setting: With this option, local administrators are allowed to use

  Automatic Updates in Control Panel to select a configuration option of their choice. For example, they can choose their own scheduled installation time. Local administrators are not allowed to disable Automatic Updates.

  Click OK.

  Set Up E-Mail Notifications

  http://technet.microsoft.com/en-us/library/cc708608%28v=ws.10%29.aspx

  In the WSUS Administration console, click Options in the left pane.

  In the center pane, click E-Mail Notifications.

  Click the General tab.

  If you want update notifications, select the Send e-mail notification when new updates are synchronized check box.

  In the Recipients box, type the e-mail addresses of the people who should receive update notifications.

  Separate the names with semi-colons.

  If you want status reports, select the Send status reports check box.

  In the Frequency box, select either Daily or Weekly.

  In the Send reports at box, set the time at which you want status reports to be sent.

  In the Recipients box type the e-mail addresses of the people who should receive status reports, delimited by semicolons.

  In the Language box, select the language in which the status reports should be sent.

  Click Apply to save these settings.

• Question 158:

  A company has servers that run a Server Core installation of Windows Server 2008.

  You are designing the migration of the servers to Windows Server 2008 R2. After the migration, you will install the Remote Desktop Services server role and the Print and Document Services server role on the servers.

  You need to ensure that shared resources on the servers are available after the migration, and minimize administrative effort.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Deploy new servers with a Server Core installation of Windows Server 2008 R2. Migrate the shared resources to the new servers.
  B. Upgrade the existing servers to a Server Core installation of Windows Server 2008 R2, and then upgrade the servers to a full installation of Windows Server 2008 R2.
  C. Move the shared resources off of the existing servers. Perform a clean installation of Windows Server 2008 R2 on the servers. Move the shared resources back onto the servers.
  D. Deploy new servers with Windows Server 2008 R2 installed. Migrate the shared resources to the new servers.
  D. Deploy new servers with Windows Server 2008 R2 installed. Migrate the shared resources to the new servers.

  ---

  The key here is minimize effort and remote desktop services.

  Server core wouldn't allow remote desktop services as it has no GUI so that would rule out answer A you also cant upgrade from core to full see http://www.windowsitpro.com/article/tips/can-i-upgrade-fromserver-core-2008-to-the-fullwindows-server-2008- or http://serverfault.com/questions/92523/upgrade-fromwindows-2008-server-core-to-full-windows-2008-server upgrade considerations for server core installations of windows server 2008 so that rules our B

  You can use the server core installation option only by performing a clean installation.

  You cannot upgrade from earlier versions of windows to server core installations of windows server 2008.

  You cannot upgrade from non-server core installations of windows server 2008 to server core installations of windows server 2008.

  You cannot convert server core installations of windows server 2008 to non-server core installations of windows server 2008.

  You can upgrade server core installations of windows server 2008 only to windows server core r2 when it is released.

  Answer C is possible but again you're asked to minimize effort so D would be 1 step less thus reducing your effort and possible down time.

• Question 159:

  You are designing a server infrastructure to support a new stateful Application. The server infrastructure must meet the following requirements:

  -Use two servers, each with two NIC cards and 32 GB of RAM.

  - Provide access to the Application in the event of the failure of a single server.

  -Provide the ability to scale up the Application.

  -

  Minimize the attack surface of each server.

  -

  Minimize server disk space requirements.

  You need to design a server infrastructure that meets the requirements.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Perform a Server Core installation of Windows Server 2008 R2 Standard Edition. Configure both servers in a failover cluster.
  B. Perform a Server Core installation of Windows Server 2008 R2. Configure both servers in a Windows Network Load Balancing array.
  C. Install Windows Server 2008 R2 on both servers. Use DNS Round Robin to balance the load between the servers.
  D. Install Windows Server 2008 R2 on both servers. Configure both servers in a Windows Network Load Balancing array.
  A. Perform a Server Core installation of Windows Server 2008 R2 Standard Edition. Configure both servers in a failover cluster.

  ---

  Failover clusters are designed for applications that have long-running in-memory state, or that have large, frequently updated data states. These are called stateful applications, and they include database applications and messaging

  applications. Typical uses for failover clusters include file servers, print servers, database servers, and messaging servers.

  Not B (stateful application in this scenario):

  Network Load Balancing is intended for applications that do not have long-running in-memory state. These are called stateless applications. A stateless application treats each client request as an independent operation, and therefore it can

  load-balance each request independently.

  Stateless applications often have read-only data or data that changes infrequently. Front-end Web servers, virtual private networks (VPNs), File Transfer Protocol (FTP) servers, and firewall and proxy servers typically use Network Load

  Balancing. Network Load Balancing clusters can also support other TCP- or UDP-based services and applications.

  Note:

  *

  Windows Server 2008 provides two clustering technologies: failover clusters and Network Load Balancing (NLB). Failover clusters primarily provide high availability; Network Load Balancing provides scalability and at the same time helps increase availability of Web-based services.

  *

  Server Core provides you with a minimal installation of Windows Server 2008 that supports installing only certain server roles. Server Core includes Network Load Balancing and Failover Clustering. Reference: Failover Cluster Overview

• Question 160:

  You need to recommend changes to the environment that meet the company's user requirements. What should you include in the recommendation?

  A. a BranchCache in Distributed Cache mode
  B. a BranchCache in Hosted Cache mode
  C. Distributed File System (DFS) namespaces
  D. Distributed File System (DFS) Replication
  C. Distributed File System (DFS) namespaces

  ---

  Users want a single point of access for all shares, a DFS Namespace will provide this. it will also meet the fail over requirement for is one server is unavailable

  Topic 18, Graphic Design Institute, Case B General Background You are the systems administrator for the Graphic Design Institute (GDI). GDI is a private liberal arts and technical college with campuses in multiple cities. Technical Background The campus locations, users, client computers, and servers are described in the following table.

  

  The campuses are connected by a fully meshed WAN.

  The corporate network includes Active Directory Domain Services (AD DS). Domain controllers are located on each campus.

  GDI uses Microsoft Windows Deployment Server (WDS) to distribute images by using Preboot Execution Environment (PXE). GDI builds images by using the Windows Automated Installation Kit (WAIK).

  GDI uses Microsoft Windows Server Update Services (WSUS) to distribute and manage Windows security updates and software updates. All private client computers and portable computers used by faculty and staff are members of the

  WSUS computer group named Staff. All shared client computers are members of the WSUS computer group named LabComputers. All faculty and staff users are members of the global security group named GDI_Staff. All students are

  members of the global security group named GDI_Students.

  Specific servers are configured as shown in the following table.

  

  The main data center is located on the Boston campus. ADMX and ADML files are centrally stored on BODC01.

  All Charlotte servers reside in the CH_Servers organizational unit (OU). CHDATA01, CHDATA02, CHDATA03, and CHDATA04 reside in the CH_FileServers OU.

  CH_FileServers is a child OU of CH_Servers.

  A Group Policy object (GPO) named ServerSettings App1ies Windows Internet Explorer settings to all servers.

  Business Requirements

  After successful migrations to Windows Server 2008 R2 in Boston, New Haven, and Tacoma, GDI plans to migrate its other campuses to Windows Server 2008 R2 in advance of a full Windows 7 client computer deployment. Server deployment on the Austin campus must be performed on weekends by using scheduled deployments.

  The post-migration environment must meet the following business requirements:

  -

  Maximize security

  -

  Maximize data protection

  -

  Maximize existing resources

  -Minimize downtime

  Technical Requirements

  The post-migration environment must meet the following security requirements:

  -

  All updates must be distributed by using WSUS.

  -

  All critical updates must be installed as soon as possible.

  - All drives on the Minneapolis campus servers must have Windows BitLocker Drive Encryption enabled.

  The post-migration environment must meet the following data protection requirements:

  -All servers must have automated backup routines.

  -

  All backups must be replicated to the Boston data center at the end of each business week.

  -

  The post-migration environment must meet the following resource requirements:

  -Installations and recovery must be performed remotely.

  -All department volumes on file servers must have NTFS quotas.

  -

  Minimize download time for users who open Microsoft Office documents over the WAN.

  -

  Ensure that users' files are always opened from the closest file server when available.

  -

  Users' files must be accessible by the same path from all campuses.