Configuring Client Authentication for New Office in Active Directory Forest

Ensure Primary Authentication for Client Computers in New Office

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

You open a new branch office that contains only client computers.

You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

Solution: You create a new subnet object that is associated to Site1.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A

The proposed solution to create a new subnet object and associate it with Site1 to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1 is not sufficient to meet the stated goal.

While it is true that creating a new subnet object and associating it with Site1 will ensure that the client computers in the new office are associated with Site1, it does not guarantee that they will primarily authenticate with the domain controllers in Site1.

To ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1, you need to configure the site link costs between the sites. By default, all sites are connected by using DEFAULTIPSITELINK, which has a cost of 100. The site link cost determines the priority of the site for authentication purposes.

To meet the goal, you should increase the cost of the site link between Site1 and the other sites to ensure that authentication requests from the new office are primarily routed to the domain controllers in Site1. You can do this by modifying the site link properties in Active Directory Sites and Services.

Therefore, the correct answer is B. No, the proposed solution is not sufficient to meet the goal.