Business Case Scenarios

Scenario 17-1: Understanding Group Policy Planning

You are the administrator for Coho Winery, Inc. a large wine distribution company that has locations
in the United States and Canady. In the last six months, Coho Winery, Inc. has purchased several
smaller distribution companies. As you integrate them into your forest, you want to allow them to
remain autonomous in their management of desktops and security. In the process of making their
domains part of your corporate network, you have some policies that you want to become part of
their environment, and others that you do not want to implement at this time. As you discuss this
with your IT team, your manager asks you to explain which features in Windows Server 2012 enable
you to provide the Group Policy flexibility needed by the new Active Directory structure. List several
of the features in Windows Server 2012 Group Policy that will enable Coho Winery, Inc. to achieve its
postacquisition goals.
Multiple local GPO's to allow flexibility for non-domain joined machines
Linking a single GPO to multiple containers, or linking multiple GPOs to a single container


Scenario 17-2: Deploying Security Templates
You are a network administrator planning a security template deployment on a network that consists
of 100 workstation. The workstations are all running various versions of Microsoft Windows, broken
down as follows:
Windows 7: 30 workstations
Windows XP Professional: 40 workstations
Windows XP Home Edition: 20 workstations
Windows 2000 Professional: 10 workstations
In the past, some computers on the network have been compromised because end users modified
their workstation security configurations. Your task is to deploy your security templates on the
workstations in such a way that end users cannot modify them. To accomplish this goal, you decide to
user Group Policy to deploy the templates to an Active Directory Domain services OU object that
contains all of the workstations.
Based on the information provided, answer the following questions.
1. How many of the workstations cannot receive their security template settings from a GPO linked to
an AD DS container?
2. Which of the following methods can you use to deploy your security templates on the workstations
that do not support Group Policy, while still accomplishing your assigned goals?
a. Upgrade all of the computers that do not support Group Policy to Windows 7.
b. Run the Security Templates snap-in on each computer and load the appropriate security template.
c. Create a logon script that uses Secedit.exe to import the security template on each computer.
d. Run the Security Configuration and Analysis snap-in on each computer and use it to import the
appropriate security template.