Configuring TS Load Balancing and Drain Mode

TS: Windows Server 2008 Applications Infrastructure, Configuring
Question Number (ID) : 1 (jcm643P_2.3_06)
______________________________________________________________________________________________________________ You are an IT support specialist in a company named Fabrikam.com Your responsibilities include managing terminal servers and clients. Your company network includes a terminal server farm named TSFARM7. The farm includes three servers, named TS-A, TSB, and TS-C. The TS Session Broker role service is installed on TS-A, and all three servers have been configured to use TS-A as the TS Session Broker server. Your manager asks you to take TS-B offline for maintenance. In advance of shutting down the server, you need to ensure that no new user sessions are initiated on TS-B while the disruption to Terminal Services users is minimized. You want to enable users to reconnect to disconnected sessions. Which of the following commands enables you to prevent new user logons on TS-B before taking the server offline?
1. Change logon /disable 2. >>Change logon /drain 3. Change user /execute 4. Change user /install <Correct>
Explanation: The Change logon /drain command prevents new user logons on a terminal server. The Change user /execute command puts a terminal server in Execute mode, which is suitable for normal operations. The Change user /install command puts a terminal server in Install mode, which is useful for installing applications with multiuser support. The Change logon /disable command prevents new logons and reconnections to disconnected sessions but does not affect currently logged-on users.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 1 and Chapter 4 - Lesson 3 Terminal Services Command Reference Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/2f371848-5c48-470c-908c-afbc95d3a8051033.mspx? mfr=true Introducing Terminal Services Server Drain Mode Terminal Services Team Blog Link: http://blogs.msdn.com/ts/archive/2007/06/15/introducing-terminal-services-server-drain-mode.aspx A closer look at Session Broker load balancing in Windows Server 2008 Brianmadden.com Link: http://www.brianmadden.com/content/article/A-closer-look-at-Session-Broker-load-balancing-in-Windows-Server-2008

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com Your responsibilities include managing terminal servers and clients. Your company network includes a terminal server farm named TSFARM2. The farm includes three servers, named TS4, TS5, and TS6. The TS Session Broker role service is installed on TS4, and all three servers have been configured to use TS4 as the TS Session Broker server. Your manager asks you to take TS5 offline for maintenance at some point during the next several days. In advance of shutting down the server, you need to ensure that no new user sessions are initiated on TS5 while the disruption to Terminal Services users is minimized. After maintenance is complete, you want TS5 to resume normal operations as soon as possible. Which of the following options best enables you to meet your goals?
1. >>On TS5, choose the option to allow reconnections but prevent new logons until the server is restarted. When all active sessions have ended, shut down the server for maintenance. After maintenance on TS5 is complete, restart the server. <Correct> 2. On TS5, log off the current users, and then shut down the server for maintenance. After maintenance on TS5 is complete, restart the server.
3. On TS5, disable the option to participate in Session Broker Load-Balancing. Shut down the server for maintenance when all active user sessions have ended. Restart the server after maintenance on TS5 is complete and then re-enable the same option.
4. On TS5, disable the option to join a farm in TS Session Broker. Shut down the server for maintenance when all active user sessions have ended. Restart the server after maintenance on TS5 is complete and then re-enable the same option.
Explanation: Your goals are to prevent new logons while minimizing disruption to users and to resume normal operations as soon as possible after maintenance is complete. By choosing the option on TS5 to allow reconnections but prevent new logons until the server is restarted, you can wait until most or all current users have ended their sessions voluntarily before you take the server offline for maintenance. This setting thus minimizes the need to terminate (and, therefore, cause unnecessary disruption to) active user sessions. This option also minimizes disruptions to all users connecting to TSFARM2: when this option is selected on a member of a TS Session Broker farm, TS Session Broker will prevent new requests to the farm from being directed toward that particular server. Finally, with this setting, the server reverts to its normal functioning state after being restarted naturally. Disabling the option to participate in Session Broker Load-Balancing will not meet your goals. This step will only prevent TS5 from receiving an equitable portion of requests for user sessions on TSFARM2. Disabling the option to join a farm in TS Session Broker will not meet your requirements. This option will prevent some but not all user logons. Users who specify TS5 by name or by IP address will still be able to establish a user session. Logging off the current users does not meet your requirement of minimizing disruption to active user sessions.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 Introducing Terminal Services Server Drain Mode
Terminal Services Team Blog Link: http://blogs.msdn.com/ts/archive/2007/06/15/introducing-terminal-services-server-drain-mode.aspx

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Wide World Importers. Your responsibilities include deploying and managing terminal servers. You need to configure a policy to enable only members of the Remote Desktop Users group to access your company's Terminal Services Gateway server from outside the corporate network. Which of the following procedures will accomplish this goal?
1. Configure a Terminal Services Connection Authorization Policy (TS CAP). 2. Configure a Terminal Services Resource Authorization Policy (TS RAP). 3. Configure a Remote Access Policy.
<Correct>
4. Do nothing. Members of the Remote Desktop Users group can always access a TS Gateway server.
Explanation: You need to configure a TS CAP because these policies authorize selected users to connect to TS Gateway. You do not need to configure a TS RAP. A TS RAP does not authorize connections to TS Gateway. A TS RAP authorizes users to connect from TS Gateway to certain terminal server resources. You do not need to configure a Remote Access Policy. A Remote Access Policy authorizes certain users to connect to a network through a virtual private network or dial-up connection. Remote Desktop Users are not automatically authorized to use TS Gateway.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 Terminal Services Gateway (TS Gateway) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/9da3742f-699d-4476-b050-c50aa14aaf081033.mspx? mfr=true

______________________________________________________________________________________________________________ You are a network administrator for a company named Contoso.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS4 to host several applications. You want to ensure that no user exhausts more than an equal share of TS4's processing power. You also want to prevent an administrative application named App4 from being subject to any CPU bandwidth restrictions. What should you do?
1. Install Windows System Resource Manager and set Equal_Per_User as the managing policy. Add App4 as a Process Matching Criteria policy. 2. Install Windows System Resource Manager and set Equal_Per_Session as the managing policy. Add App4 as a Process Matching Criteria policy. 3. Install Windows System Resource Manager and set Equal_Per_Session as the managing policy. Add App4 as an exclusion. 4. Install Windows System Resource Manager and set Equal_Per_User as the managing policy. Add App4 as an exclusion. <Correct>
Explanation: You want to divide CPU usage equally among users, not among sessions, so you need to set Equal_Per_User as the managing policy. Adding App4 as a Process Matching Criteria policy enables you to use that element only later in a custom Resource Allocation Policy. Adding App4 as an exclusion will remove it from the list of processes being managed by this policy.
Objective: Configuring Terminal Services Sub Objective(s): Configure and monitor Terminal Services resources. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 1

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com. Your responsibilities include managing terminal servers and clients. You have configured a terminal server farm named TSFARM1. The farm includes three servers, named TS1, TS2, and TS3. Users connecting to TSFARM1 report that when they are accidentally disconnected from a Terminal Services session, they cannot always reconnect to the same session and continue their work. Which step should you take to ensure that users who are disconnected from TSFARM1 are able to reconnect to their open sessions?
1. Configure TS Session Broker. 2. Configure failover clustering.
<Correct>
3. Configure round-robin distribution. 4. Configure Network Load Balancing.
Explanation: The TS Session Broker role service is used to keep track of all the user sessions on the terminal servers in a terminal server farm. If users who are accidentally disconnected from a Terminal Services farm attempt to reconnect, TS Session Broker directs those users back to the particular server farm member on which their session is hosted. None of the other answer choices enable a user to reconnect to a disconnected session on a terminal server farm.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 Terminal Services Session Broker (TS Session Broker) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/902a6081-9ecd-45ec-96ee-f51097d71c8c1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Fabrikam.com. Your job responsibilities include deploying and configuring terminal servers. You are testing the deployment of a new TS Gateway server named TSGate4. Your goal is to enable authorized users to connect to a terminal server named TS4 through the new TS Gateway. On a client computer named Client1 within the Fabrikam.com network, you configure Remote Desktop Connection to use TSGate4. You are then able to establish a Terminal Services session successfully on TS4 from Client1. You need to verify that the connection from Client1 is connecting successfully through TS Gateway. What step should you take to achieve this goal?
1. On TSGate4, use TS Gateway Manager to verify that Client1 has established a connection. 2. On Client1, verify that the option to bypass the TS Gateway server for local addresses is selected.
<Correct>
3. On TS4, use Terminal Services Manager to verify that Client1 has established a Terminal Services session. 4. On Client1, verify that the option to bypass the TS Gateway server for local addresses is disabled.
Explanation: The only way to verify that a client is using TS Gateway is to use TS Gateway Manager to check for active connections. If Client1 has established a connection through TSGate4, you will see the connection in the console when you select the Monitoring folder. You don't want to select the option to bypass the TS Gateway server. This option might prevent Client1 from connecting to TSGate4 if both computers are located on the same subnet. Clearing the option to bypass the TS Gateway server for local addresses in fact might be necessary, but only if Client1 and TSGate4 are located on the same subnet. However, even if you must select this option, doing so does not enable you to verify that a client has connected successfully to TS Gateway. Using Terminal Services Manager on TS4 will not enable you to determine whether Client1 has successfully connected through the TS Gateway server. It will only enable you to determine the status of Client1's connection to TS4.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com Your responsibilities include managing terminal servers and clients. You are implementing a terminal server farm named TSFARM6. The farm includes four terminal servers, named TS5, TS6, TS7, and TS8. TS5 is running Windows Server 2008, and the other three servers are running Windows Server 2003. You install the TS Session Broker role service on TS5, and then you add all four servers to the Session Directory Computers local group on TS5. You configure round-robin in DNS to distribute the initial client requests among all four terminal servers. You are not using any additional load-balancing technology. Users complain that they cannot re-connect to disconnected Terminal Services sessions on TSFARM6. You want users who establish Terminal Services sessions on the farm to be able to re-connect to disconnected sessions. Which of the following steps should you perform to solve the problem? (Each correct answer presents part of the solution. Choose two.)
1. Configure all four servers to join the terminal server farm. 2. Upgrade TS6, TS7, and TS8 to Windows Server 2008.
<Correct> <Correct>
3. Configure all four servers to participate in Session Broker Load Balancing. 4. Configure all four servers with the option to restrict each user to a single session. 5. Configure all four servers with a relative weight of 100 in the server farm.
Explanation: A basic feature of a TS Session Broker farm is that users connecting to the farm can re-connect to a disconnected session. Each member of the TS Session Broker farm must be running Windows Server 2008. Then, you need to join each server to the farm. (Only once each server is running Windows Server 2008 can you use the Terminal Services Configuration console to join each server to a TS Session Broker farm.) Configuring all four servers to participate in Session Broker Load Balancing will only enable the TS Session Broker service to distribute client requests effectively among farm members. Assigning a relative weight of 100 to each server ensures that each server will receive an equal share of the client requests. Configuring each server with the option to restrict each user to a single session only prevents users from owning two simultaneous sessions on a particular server.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 A closer look at Session Broker load balancing in Windows Server 2008 Brianmadden.com Link: http://www.brianmadden.com/content/article/A-closer-look-at-Session-Broker-load-balancing-in-Windows-Server-2008 Windows Server 2008 RC0 TS Session Broker Load Balancing Step-by-Step Guide Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/f9fe9c74-77f5-4bba-a6b9-433d823bbfbd1033.mspx? mfr=true Terminal Services Session Broker (TS Session Broker) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/902a6081-9ecd-45ec-96ee-f51097d71c8c1033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Fabrikam.com. The Fabrikam.com network includes a single Active Directory forest that is composed of two Active Directory domains, Fabrikam.com and Contoso.com. The Fabrikam.com domain includes several terminal servers and a Terminal Services license server named TSL-2. These terminal servers are used to host various applications for users in the Fabrikam.com domain. All your terminal servers, including TSL-2, are running Windows Server 2008. Your manager asks you to deploy a terminal server to host an application named App1 for users in the Contoso.com domain. You install Terminal Services on a server named TS-30.contoso.com. You configure TS-30 to discover a license server automatically. After several days, you begin to receive messages on TS-30, indicating that Terminal Services will stop functioning if licensing is not configured. In the Terminal Services Configuration console on TS-30, the licensing mode is listed as Not Configured. You have verified that TS-30 and TSL-2 can communicate with each other on the network. You have also verified that the terminal servers in the Fabrikam.com domain can automatically discover TSL-2. You want Terminal Services on TS-30 to locate the license server on TSL-2. What should you do? (Each correct answer presents a complete solution. Choose two.)
1. Configure TS-30 with the option to use a specified license server. 2. Set the Discovery Scope on TSL-2 to Forest. 3. Move TS-30 to the Fabrikam.com domain. 4. Install a TS license server on TS-30. 5. Move TSL-2 to the Contoso.com domain. <Correct>
<Correct>
Explanation: The problem stated is that TS-30 is not automatically discovering the TS license server on TSL-2, which is found on another domain in the same forest. Given that terminal servers in the same domain can automatically discover TSL-2, it is likely that the Discovery Scope on TSL-2 is set to Domain, which is the default setting. To make the TS license server discoverable to other domains in the same forest, you can set its Discovery Scope to Forest. Another option is to specify TSL-2 as the license server on TS-30; this step would remove the need for automatic discovery. Moving TSL-2 to the Contoso.com domain would cause unnecessary network disruption. Terminal servers in production in the Fabrikam.com domain already rely on TSL-2, so moving the license server without changing the license server's discover scope is not an option. Moving TS-30 to the Fabrikam.com domain is not the best option because you are deploying the server to host an application for users in the Contoso.com domain. Installing a TS license server on TS-30 does not meet the stated goal of TS-30 locating TSL-2.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 Terminal Services License Server Discovery Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/fc40594d-72af-42ca-b44f-b7434aea0dde1033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Tailspin Toys. Your responsibilities include supporting terminal servers and clients. Users in the Art department who connect to terminal servers complain that they cannot choose specific printers within their Terminal Services sessions. Different printing jobs require different printers, but users do not see their normal selection of printers. You want users to see their usual selection of printers within Terminal Services sessions. What should you do?
1. In Group Policy, enable the policy setting to use Terminal Services Easy Print printer driver first. 2. In Group Policy, disable the policy setting to use Terminal Services Easy Print printer driver first. 3. In Group Policy, disable the policy setting to redirect only the default client printer. 4. In Group Policy, enable the policy setting to redirect only the default client printer. <Correct>
Explanation: In the question scenario, users are not seeing the full range of printer options within Terminal Services sessions. This problem can be caused by a Group Policy setting that redirects only the client's default printer to the Terminal Services session. To make the full selection of client printers appear (not just the default printer) in the Terminal Services session, you need to disable this Group Policy setting. You do not need to enable or disable the policy setting to use Terminal Services Easy Print printer driver first. This setting, when enabled, uses a standard printer driver that improves Terminal Services printing for clients running Remote Desktop Connection 6.1 or later.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 7 - Lesson 2 Terminal Services Printing Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/484d57e7-feb4-4dcc-9d13-152c053516471033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Wide World Importers. Your responsibilities include supporting terminal servers and clients. You need to deploy a new terminal server in your organization. Users plan to use the server to play Windows Media Player files. Which of the following features do you need to install on the new server so that users can play Windows Media Player files in their Terminal Services client connections?
1. XPS Viewer 2. Remote Differential Compression 3. Desktop Experience <Correct>
4. Quality Windows Audio Video Experience
Explanation: You need to install the Desktop Experience feature because this is the only feature that includes Windows Media Player. Quality Windows Audio Video Experience (qWave) provides mechanisms to allow quality-of-service (QoS) for streaming media over IP networks. It is not a requirement. Remote Differential Compression computes and transfers the differences between two objects over a network by using minimal bandwidth. It is not used to play Windows Media Player files. XPS Viewer allows viewing, signing, and protecting of XPS documents. It is not used with Windows Media Player files.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 7 - Lesson 1 Remote Desktop Connection Display Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/fc0b405b-07ef-4767-8716-198d7f0949011033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named Fabrikam, Inc. The Fabrikam.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and supporting user applications. You install several applications to be used as RemoteApp programs on a terminal server named TS10, and you add these programs to the list of RemoteApp programs. You do not change any of the default settings for the RemoteApp programs installed on TS10. On a server named WebApp1, you configure TS Web Access to point to TS10. However, none of the RemoteApp programs on TS10 display on the TS Web Access site on WebApp1. You have ruled out network connectivity problems between the two servers. You want users to access the RemoteApp programs on TS10 by browsing to the TS Web Access page on WebApp1. What should you do?
1. Add the TS Web Access role service on TS10. 2. Add the TS Web Access role service on WebApp1. 3. Add WebApp1 to the TS Web Access Computers security group on TS10. 4. Add TS10 to the TS Web Access Computers security group on WebApp1. <Correct>
Explanation: You want TS Web Access on WebApp1 to display RemoteApp programs installed on TS10. To achieve this result, you need to perform two steps. First, you need to configure TS Web Access on WebApp1 to point to TS10. Second, you need to add WebApp1 to the TS Web Access Computers security group on TS10. You do not need to add TS10 to the TS Web Access Computers security group on WebApp1. The members of the TS Web Access Computers security group are able to read the list of RemoteApp programs on the local computer. You need WebApp1 to read the list on TS10, not vice versa. You do not need to add the TS Web Access role service on WebApp1. Because the question states that you have configured TS Web Access to point to TS10, the TS Web Access role service must already be added. You do not need to add the TS Web Access role service on TS10. The functionality of this role service is not needed on this computer. You want users to connect to WebApp1 to select RemoteApp programs, not TS10.
Objective: Configuring Terminal Services Sub Objective(s): Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp). References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 3 Terminal Services RemoteApp (TS RemoteApp) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/57995ee7-e204-45a4-bcee-5d1f4a51a09f1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com, whose corporate network consists of a single Active Directory domain. Your job responsibilities include managing terminal servers and clients. Your network includes a terminal server named TS80 that is used to host a line-of-business application named App80. As many as 30 users can be connected to TS80 simultaneously to use App80. However, when more than 25 users are connected to TS80, the performance of App80 degrades significantly. You have discovered that many users leave Remote Desktop connections to TS80 open for extended periods of time. You want to prevent inactive user connections such as these from exhausting the limited resources of TS80. How can you configure the session settings on TS80 to automatically log off user sessions that have been inactive for 15 minutes? To answer, configure the appropriate options in the dialog box. When you are finished, click OK in the dialog box. Explanation: You want to set a 15-minute limit on inactive (idle) sessions. To do this, you need to select the top Override User Settings check box and then choose 15 Minutes from the Idle Session Limit drop-down list. You also want idle sessions to be logged off automatically after 15 minutes. (You do not want them merely to be disconnected.) To accomplish this goal, you need to select the bottom Override User Settings check box and then choose the End Session option. You do not want to set a limit for disconnected sessions. The question states a requirement to limit inactive connected sessions, not disconnected sessions. You do not want to set a limit for active sessions. The question states a requirement to limit inactive sessions, not active sessions. You do not want to choose the option to disconnect from the session when the session limit is reached. The question states a requirement to log off an idle session, not just to disconnect the session from the server.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services server options. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Trey Research. Your responsibilities include supporting user applications. A user informs you of a certain error she is receiving while she uses an application named App5 that is running on a terminal server named TS5. She wants to re-create the error for you, but she is located in another building. You have administrative privileges on TS5. How can you monitor the user's session so that you can witness the error that she is describing in App5?
1. Connect to App5 in a Remote Desktop Protocol session and use the Tscon command. 2. Connect to App5 in a console session and use the Tscon command. 3. Connect to App5 in a console session and use the Shadow command. 4. Connect to App5 in a Remote Desktop Protocol session and use the Shadow command. <Correct>
Explanation: You want to monitor the user's active session while she re-creates the error. The Shadow command is used to monitor a Terminal Services session. However, you can use the Shadow command to monitor a user's session to a terminal server only from within an RDP session to the same terminal server. You cannot use the Shadow command from within a console session. You cannot use the Tscon command to monitor another user's active session. The Tscon command is used to connect a user to a disconnected session.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 1 Terminal Services Command Reference Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/2f371848-5c48-470c-908c-afbc95d3a8051033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com whose corporate network consists of a single Active Directory domain. Your job responsibilities include deploying and managing terminal servers. Recently, you deployed a terminal server named TS50. TS50 will be used to host a line-of-business application in the in Fabrikam.com domain. Your manager has asked you to create a user group named TS_Admins with the privileges required to administer Terminal Services on TS50. She does not want the group to be assigned administrative privileges to the server or to the domain in general. She also does not want TS_Admins to be able to administer other terminal servers in the domain. However, she does want to be able to modify the permissions of TS_Admins so that its members can administer other terminal servers in the future. You want to create a group named TS_Admins that is assigned the appropriate privileges and restrictions described by your manager. What should you do? (Each correct answer presents a complete solution. Choose two.)
1. Add TS_Admins to the Remote Desktop Users group on a domain controller in the Fabrikam.com domain. 2. Create a group named TS_Admins in the Contoso.com domain. <Correct>
3. Assign the TS_Admins group the User Access - Allow permission to the Remote Desktop Protocol (RDP) on TS50. 4. Create a group named TS_Admins on TS50. 5. Assign the TS_Admins group the Full Control - Allow permission to the Remote Desktop Protocol (RDP) on TS50. <Correct> 6. Add TS_Admins to the Remote Desktop Users group on TS50.
Explanation: The requirements are to create a group with administrative privileges to Terminal Services on TS50. The group might be used in the future to provide administrative privileges to other terminal servers. To create a group that might be used to manage other terminal servers, the group must be created in the Contoso.com domain and not locally on TS50. To assign that group the rights to manage Terminal Services, you must assign the group the Full Control - Allow permissions to the RDP protocol. You can configure this option on the Security tab of RDP-Tcp properties in the Terminal Services Configuration console on TS50. Adding TS_Admins to the Remote Desktop Users group only allows them to access a computer as a client. It does not assign any administrative privileges to its members. Assigning an account the User Access-Allow permission is the same as adding that account to the Remote Desktop Users group; it does not assign any administrative privileges to that account.

______________________________________________________________________________________________________________ Your company has deployed a server named TS6 that is running Terminal Services. TS6 hosts several RemoteApp programs. Users connect to the RemoteApp programs through TS Web Access. Users complain that a certain program named App6 is not appearing in TS Web Access. You confirm that App6 is installed properly on TS6. You want users to be able to access App6 through TS Web Access. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. In TS RemoteApp Manager on TS6, verify that the Terminal Server Settings have been configured with the option to show a remote desktop connection to this terminal server in TS Web Access. 2. In TS RemoteApp Manager, verify that TS6 has been added to the list of RemoteApp programs. <Correct>
3. In TS RemoteApp Manager on TS6, verify that the properties of App6 have been configured so that no command-line arguments can be specified. 4. In TS RemoteApp Manager on TS6, verify that the properties of App6 have been configured with the option to make the RemoteApp program available through TS Web Access. <Correct> 5. In TS RemoteApp Manager on TS6, verify that the properties of App6 have been configured so that any command-line arguments can be specified.
Explanation: To make a RemoteApp program available in TS Web Access, you need to add that program to the list of RemoteApp programs in TS RemoteApp Manager. By default, the program will appear automatically in TS Web Access. However, if the program has already been added to the RemoteApp program list and is not appearing in TS Web Access, you should verify that the option is enabled to make the program available through TS Web Access. Configuring the option to enable or disable command-line arguments will not affect whether a RemoteApp program appears in TS Web Access. You do not need to configure the option to show a remote desktop connection to the terminal server. This option does not affect whether a RemoteApp program appears in TS Web Access.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Blue Yonder Airlines. The Blueyonderairlines.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and configuring terminal servers. Your network includes a group of terminal servers that host applications for all domain users and a second group of terminal servers whose access is restricted to only domain administrators. Management has determined that users should be able to connect to the Blueyonderairlines.com terminal servers from anywhere on the Internet. In the new policy, remote users should be able to connect only to the same servers that they can connect to when logged on locally inside the corporate network. You install and configure a new TS Gateway server named TSGate9 in the company's perimeter network. During installation, you specify a server certificate obtained from the local certificate authority integrated into the Blueyonderairlines.com Active Directory domain. Your goal is to enable remote users to connect only to the authorized terminal server resources through the new TS Gateway. Which of the following is NOT a possible step toward achieving this result?
1. Create two local security groups on TSGate9 corresponding to the two sets of terminal servers. 2. Create two global security groups in Blueyonderairlines.com corresponding to the two sets of terminal servers. 3. Create two organizational units (OUs) in Blueyonderairlines.com corresponding to the two sets of terminal servers. <Correct> 4. Create two TS Gateway-managed computer groups on TSGate9 corresponding to the sets of terminal servers.
Explanation: When you configure the Terminal Services Resource Authorization Policies (TS RAP) for TS Gateway, you will need to allow all domain users access to one set of terminal servers and allow only domain administrators access to a second set of terminal servers. The only way to achieve this result is by creating two groups corresponding to each group of terminal servers. These groups can be local to TSGate9, global for the Blueyonderairlines.com domain, or created and managed in TS Gateway Manager (a TS Gateway-managed computer group). However, you cannot allow access to terminal resources in a manner based on OU membership.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 Terminal Services Gateway (TS Gateway) Microsoft TechNet Link: http://technet2.microsoft.com/WindowsServer2008/en/library/9da3742f-699d-4476-b050-c50aa14aaf081033.mspx

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named A Datum Corporation. The company network is composed of a single Active Directory domain. Your job responsibilities include supporting user applications. You are hosting a RemoteApp program on a server named TS1. TS1 is reserved for hosting Microsoft Excel, and you have no plans to deploy any other application on this server. Users connect to Excel only through the TS Web Access site, and individual users often connect from different computers to use Excel. Currently, when users save files in Excel, they can save to their local drives by opening the computer icon in the Save As dialog box. Recently, users have begun to complain that they are losing the files they save in Excel. You discover that users who move from computer to computer tend to save files locally on their client computers. As a result, their files are spread among various client computers on the Adatum.com network. You want to prevent Excel users from saving files to their local workstation. You want to achieve this goal with the least amount of administrative effort. Which of the following procedures will accomplish this goal?
1. In TS RemoteApp Manager, configure the RDP Settings so that the Clipboard option is disabled. Create an RDP file for Excel and distribute the RDP file to users through a network share. 2. In TS RemoteApp Manager, configure the RDP Settings so that the Clipboard option is disabled. Enable users to continue to access Excel through TS Web Access. 3. In TS RemoteApp Manager, configure the RDP Settings so that the Disk Drives option is disabled. Enable users to continue to access Excel through TS Web Access. <Correct> 4. In TS RemoteApp Manager, configure the RDP Settings so that the Disk Drives option is disabled. Create an RDP file for Excel and distribute the RDP file to users through a network share.
Explanation: The Disk Drives option enables local client drives to be available to the local workstation in a Terminal Services session. To prevent local drives from being accessible in Excel, disable the Disk Drives option in the RDP Settings in TS RemoteApp Manager. The RDP settings you configure in TS RemoteApp Manager apply to all RemoteApp programs hosted on the terminal server that appear in TS Web Access. Because you are hosting only one RemoteApp program on TS1 and do not plan to host any others, changing these general options will not affect other RemoteApp programs. Although you could distribute an RDP file with the new settings, this step is unnecessary and does not achieve the desired result with the least amount of administrative effort. When you disable the Clipboard option in RDP Settings, you do not prevent users from easily saving to their local drives. You merely prevent users from copying and pasting data from the RemoteApp program onto their local desktop sessions.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named A Datum Corporation. The Adatum.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and configuring terminal servers. You install and configure a new TS Gateway server named TSGate8 inside the corporate network. During installation, you specify a server certificate obtained from the local certificate authority integrated into the Adatum.com Active Directory domain. You want to use a computer running Internet Security and Acceleration (ISA) Server 2006 installed in the company's perimeter network as an SSL bridging device between external Terminal Services clients and TS Gateway internal to the network. On ISA Server, you have installed a server certificate obtained from a third-party certification authority (CA) that is trusted by all computers running Windows. Neither ISA Server nor the external clients are members of the Adatum.com Active Directory domain. Which step must you take to enable ISA Server to act as a Secure Sockets Layer (SSL) bridging device?
1. Install the server certificate for TS Gateway in the Trusted Root Certificate Authorities store on the external clients. 2. Install the server certificate for ISA Server in the Trusted Root Certificate Authorities store on the external clients. 3. Install the server certificate for ISA Server in the Trusted Root Certificate Authorities store on TS Gateway. 4. Install the server certificate for TS Gateway in the Trusted Root Certificate Authorities store on ISA Server. <Correct>
Explanation: In SSL communications, the SSL server needs a server certificate, and the SSL client needs to trust the CA that has issued that server certificate. When ISA Server acts as an SSL bridging device, it acts as both an SSL server for the external TS clients and as an SSL client for the internal TS Gateway. Because ISA Server is an SSL client to TS Gateway, ISA Server needs to trust the certificate authority that has issued the server certificate to TS Gateway. ISA Server is not a member of the Adatum.com domain, so ISA Server does not trust the Adatum.com CA by default. Therefore, you need to import and install the root certificate for the CA in the Trusted Root Certification Authorities store on ISA Server. The external TS clients act as SSL clients of ISA Server. Therefore, the external clients need to trust the CA that has issued the certificate to ISA Server. In this case, the CA is a trusted third-party certification authority, so installing the ISA Server server certificate is not necessary. You do not need to install the TS Gateway certificate on the external certificate because in an SSL bridging scenario such as this, no direct communication occurs between the TS clients and TS Gateway.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 Terminal Services RemoteApp (TS RemoteApp) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/57995ee7-e204-45a4-bcee-5d1f4a51a09f1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Contoso Pharmaceuticals. The company network is composed of a single Active Directory domain. Your job responsibilities include deploying and configuring terminal servers. A new corporate policy requires that users run RemoteApp programs only from trusted publishers. Currently, Contoso is hosting a single RemoteApp program, Microsoft Word, which is hosted on a server named Server5. Users currently connect to Word through an RDP file. You want to enforce the new corporate policy, and you want users to be able to run Word. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. Configure Group Policy for Remote Desktop Connection to allow RDP files from valid publishers. 2. In TS RemoteApp Manager on Server5, configure the Digital Signature Settings with the option to sign RDP files with a digital certificate. 3. In TS RemoteApp Manager on Server5, create a new RDP file for Microsoft Word. Choose the option to sign the file with a digital certificate and then distribute the new RDP file to users through a network share. <Correct> 4. In TS RemoteApp Manager on Server5, create a new Windows Installer package for Microsoft Word. 5. Configure Group Policy for Remote Desktop Connection to deny RDP files from unknown publishers. <Correct>
Explanation: To meet the requirements of the new corporate policy, you need to prevent users from running RemoteApp programs from unsigned publishers. To meet this requirement, you need to configure Remote Desktop Connection settings in Group Policy to allow RDP files from trusted publishers only. To meet the requirement that users be able to run Microsoft Word, you have to create a new RDP file for Word that is signed with a digital certificate. You then need to distribute that new RDP file to users. If you configure the option to allow RDP files from trusted publishers, files from unknown publishers will not be blocked. If you configure the Digital Signature Settings with the option to sign RDP files with a digital certificate, all subsequent RDP files you create in TS RemoteApp Manager will be signed by default. However, users still need to connect to Word with a new RDP file that is digitally signed by a trusted publisher. Creating a new Windows Installer package will not solve the problem. If you want to meet the requirements of the new corporate policy by using a Windows Installer package, you will have to specify the option to sign the package with a certificate during the creation of the package. Then, you will have to distribute the file to users and instruct them to run the installer package. You cannot meet all of these requirements with the available answer choices.

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named Trey Research. The Treyresearch.net network is composed of a single Active Directory domain. Your job responsibilities include deploying and supporting user applications. Your network includes a terminal server named TS9 that hosts a RemoteApp program named App9. Users connect to App9 through TS Web Access. App9 is the only application listed in TS Web Access. Recently, you have noticed that users are automatically launching applications, other than App9, once their RDP sessions to TS9 are established. As much as possible, you want to reserve the resources of TS9 for App9. You want to prevent users from running other programs upon the initial connection to TS9. Which of the following steps accomplishes this goal?
1. Sign an RDP file for App9 with a digital certificate. 2. Configure an RDP file for App9 with a custom RDP port. 3. Remove all programs except for App9 from the RemoteApp program list on TS9. 4. On TS9, select the option to disable users from starting unlisted programs on initial connection. <Correct>
Explanation: You need to prevent users from starting unlisted programs when they connect to TS9. To achieve this result, you need to configure the Terminal Server Settings in TS RemoteApp Manager with the option to prevent users from starting unlisted programs on initial connections. Removing programs from the RemoteApp list will not affect whether users can launch programs on initial connection. In addition, it is likely that no other programs besides App9 are added to the RemoteApp programs list because no other programs are appearing in TS Web Access. Creating an RDP file for App9 that is signed with a digital certificate will have no affect on the users' ability to launch programs on initial connection. It will serve only to assure users that the RDP file originates from TS9. Configuring an RDP file for App9 with a custom RDP port will have no affect on the users' ability to launch programs on initial connection. Configuring a custom RDP port adds an extra level of security for the server.

______________________________________________________________________________________________________________ You are a network administrator for a company named Contoso.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS6 to host network monitoring applications. You and several other administrators connect to TS6 throughout the day to monitor various aspects of network performance. Some of these network monitoring applications can perform processor-intensive operations that slow the performance of other important applications. You want to configure TS6 to ensure that no application process exhausts more than an equal share of TS6 processing power. What should you do?
1. Install Windows System Resource Manager and set Equal_Per_IISAppPool as the managing policy. 2. Install Windows System Resource Manager and set Equal_Per_User as the managing policy. 3. Install Windows System Resource Manager and set Equal_Per_Session as the managing policy. 4. Install Windows System Resource Manager and set Equal_Per_Process as the managing policy. <Correct>
Explanation: Because you want to divide processor usage equally among processes, you should set the built-in Resource Allocation Policy named Equal_Per_Process as the managing policy in Windows System Resource Manager. When the Equal_Per_Process resource allocation policy is managing the system, each running process is given equal treatment. For example, if a server that is running ten processes reaches 70 percent processor utilization, Windows System Resource Manager will limit each process to using 10 percent of the processor resources while they are in contention. Note that resources not used by low-utilization processes will be allocated to other processes. The Equal_Per_User policy sets a cap on processor usage by limiting all users, not processes, to an equal share of the terminal server processor or processors. The Equal_Per_Session policy distributes processor time equally among all user sessions, not among all processes. The Equal_Per_IISAppPool policy distributes the processor usage equally among all IIS application pools, not among all processes running on the terminal server.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Fabrikam, Inc. Your responsibilities include supporting terminal servers and clients. Recently, users have been complaining about the performance of their Terminal Services sessions on a terminal server named TS6. You open Terminal Services Manager and find many disconnected sessions from the same users. You want to prevent users from establishing more than one simultaneous connection to TS6. What should you do?
1. In Terminal Services Configuration, configure TS6 to enable reconnections but prevent new logons. 2. In Terminal Services Configuration, configure TS6 to allow reconnections but prevent new logons until the server is restarted. 3. In Terminal Services Configuration, configure TS6 to restrict each user to a single session. 4. In Terminal Services configuration, configure TS6 to end sessions that are disconnected. <Correct>
Explanation: To prevent users from establishing more than one simultaneous connection to a terminal server, use Terminal Services Configuration to enable the option to restrict each user to a single session. The two options that enable reconnections but prevent new logons will stop all new user logons. You do not want to prevent users from logging on. You only want users to establish no more than one logon session. The option to end sessions that are disconnected will not prevent users from establishing more than one simultaneous connection. It will only prevent all disconnected user sessions.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 7 - Lesson 2 Terminal Services Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/servermanager/terminalservices.mspx

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Adventure Works. Your responsibilities include managing terminal servers and clients. You need to shut down a terminal server named TS1 for maintenance. In Terminal Services Manager, you see that there is one active user session connected to TS1 through RDP-Tcp. You want to prevent new users from connecting to TS1 before you are able to shut the server down. Then you want to end the active remote user session while still giving the user a chance to save his or her work. Which of the following commands should you use? (Each correct answer presents part of the solution. Choose two.)
1. Tskill 2. Rwinsta 3. Change User (Chgusr) 4. Logoff <Correct> <Correct>
5. Change Logon (Chglogon)
Explanation: To prevent new users from logging on to TS1 before you have an opportunity to shut down, use the Chglogon /drainuntilrestart command. To end another user's session while giving the user an opportunity to save his or her work, use the Logoff command. The other commands do not achieve the desired result. The Rwinsta command deletes a user session without giving the user an opportunity to save his or her work. The Tskill command ends a single process running in a session on a terminal server. The Chgusr command changes the install mode for the terminal server.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 1 Terminal Services Command Reference Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/2f371848-5c48-470c-908c-afbc95d3a8051033.mspx

______________________________________________________________________________________________________________ You work for a company named Northwind Traders, whose corporate network consists of a single Active Directory domain. The corporate network includes a server named TS1 that runs a finance application named App1. No other applications are hosted on TS1. You need to configure a policy that will authorize only members of the Finance security group to connect to the terminal server named TS1 from the Internet. Members of the Finance security group can already connect from the Internet to other terminal servers on the network. What should you do?
1. Configure a Terminal Services Connection Authorization Policy (TS CAP). 2. Configure a Terminal Services Resource Authorization Policy (TS RAP). <Correct>
3. Use Group Policy to enforce Remote Desktop Connection settings for members of the Finance group to use the corporate TS Gateway server. 4. Configure a Remote Access Policy.
Explanation: You need a TS RAP because a TS RAP is the policy that authorizes users to connect to specific terminal server resources in a network. You do not need a TS CAP because members of the Finance group can already access other terminal servers on the Northwindtraders.com network. You do not need to configure a Remote Access Policy. A Remote Access Policy authorizes certain users to connect to a network through a virtual private network or dial-up connection. It does not enable users to connect to terminal server resources on a network from points outside that network. You do not want to force all members of the Finance group to use TS Gateway because some members might be connecting from inside the corporate network. In addition, this solution does not address the problem that members of the Finance group are not yet authorized to connect to TS1 through TS Gateway. To authorize users to do that, you need a TS RAP.

______________________________________________________________________________________________________________ You are a network administrator for a company named Contoso.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS2 to host several applications. You have configured TS2 to allow multiple sessions from each user. You want to ensure that no one session exhausts more than an equal share of TS2's processing power. How can you configure TS2 to share its processing power equally among user sessions?
1. Install Windows System Resource Manager and set Equal_Per_Session as the managing policy. 2. Install Windows System Resource Manager and set Equal_Per_IISAppPool as the managing policy. 3. Install Windows System Resource Manager and set Equal_Per_Process as the managing policy. 4. Install Windows System Resource Manager and set Equal_Per_User as the managing policy.
<Correct>
Explanation: The Equal_Per_Session resource allocation policy is used with Terminal Services to ensure that CPU bandwidth is divided equally among user sessions. On terminal servers that limit each user to one session, the Equal_Per_User policy is equivalent to the Equal_Per_Session policy. However, on this particular server, you have configured the settings so that each user can own more than one concurrent session. The Equal_Per_Process policy distributes processor time equally among all running processes, not among all users. The Equal_Per_IISAppPool policy distributes the processor usage equally among all IIS application pools, not among all users.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com Your responsibilities include managing terminal servers and clients. Your company network includes a terminal server farm named TSFARM5. The farm includes four servers, named TS1, TS2, TS3, and TS4. The TS Session Broker role service is installed on TS1. You are using round-robin in DNS to distribute the initial client requests among the terminal servers. You are not using any additional load-balancing technology. Because TS4 is the most powerful of the four servers, you want TS4 to host half of the total number of Terminal Services client sessions in the farm. You have assigned all three other servers a relative weight of 100 in the server farm. Which value should you assign to TS4 for its relative weight in the server farm?
1. 150 2. 200 3. 50 4. 300 <Correct>
Explanation: If you have assigned all three other servers a relative weight of 100, the total weight of the three servers combined is 300. For TS4 to receive half of the total of the entire farm, you should, therefore, assign it a matching value of 300.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 Windows Server 2008 RC0 TS Session Broker Load Balancing Step-by-Step Guide Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/f9fe9c74-77f5-4bba-a6b9-433d823bbfbd1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com whose corporate network consists of a single Active Directory domain. The client network includes 10 servers running Windows Server 2008 Enterprise and 200 clients running Windows Vista Enterprise. All client computers are running Remote Desktop Connection 6.0. Your network includes a terminal server named TS30 that is used to host a line-of-business application named App30. A new company policy states that managers and IT personnel may only monitor the work of employees with the employees' permission. In addition, the policy states that managers and IT personnel can interact with user sessions only through Remote Assistance, not through Terminal Services. The current RDP-Tcp settings for TS30 are shown in the exhibit. You need to ensure that TS30 complies with the new policy. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. Enable the View The Session option. 2. Enable the Do Not Allow Remote Control option.
<Correct>
3. Enable the Use Remote Control With Default User Settings option. 4. Check the Require User's Permission check box. <Correct>
Explanation: You need to configure TS30 so that managers and IT personnel can only monitor, not interact with, user sessions. To meet this requirement, you need to ensure that the Use Remote Control With The Following Settings option is selected and then enable the View The Session option. You also need to configure TS30 so that managers and IT personnel cannot monitor user sessions without the user's permission. To meet this requirement, select the Require User's Permission check box.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Northwind Traders. Your responsibilities include supporting terminal servers and clients. Recently, users have been complaining about the performance of their Terminal Services sessions on a terminal server named TS3. You open Terminal Services Manager and find many disconnected user sessions that have been inactive for days. You want to delete sessions immediately that have been inactive for more than one day. Which command should you use?
1. Tskill 2. Rwinsta 3. Tsdicson 4. Quser <Correct>
Explanation: The Rwinsta or Reset session command enables you to delete a session on a terminal server. This is the best way to remove inactive sessions immediately. The Quser or Query user command displays information about user sessions on a terminal server. It is not used to delete user sessions. The Tsdiscon command disconnects a session from a terminal server. In this case, the inactive sessions are already disconnected from the terminal server. You want to delete the sessions, not disconnect them. The Tskill command ends a process running in a session on a terminal server. It is not used to end a user session in general.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services client connections. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 1 Terminal Services Command Reference Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/2f371848-5c48-470c-908c-afbc95d3a8051033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com, whose corporate network consists of a single Active Directory domain. The Fabrikam.com network includes 10 servers running Windows Server 2008 and 200 clients running Windows Vista Enterprise. All client computers are running Remote Desktop Connection 6.0. Your network includes a terminal server named TS70. You need to take TS70 offline for maintenance, but when you log on to TS70 locally and open Terminal Services Manager, you discover that a single user named PauloN is connected to TS70 in an active Terminal Services session. You want to shut down the computer within five minutes, but you also want to give PauloN a chance to save his work. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. In Terminal Services Manager, send PauloN a message indicating that you will shut the server down in five minutes and requesting him to save his work. <Correct> 2. In Terminal Services Manager, choose the option to log off PauloN. <Correct>
3. Log on to TS70 through an RDP connection and send PauloN a message indicating that you will shut the server down in five minutes and requesting him to save his work. 4. In Terminal Services Manager, choose the option to reset PauloN's session. 5. In Terminal Services Manager, choose the option to disconnect PauloN's session.
Explanation: You want to give a single user a chance to save his work, and then you need to end his session. The best way to do this is to send a message from Terminal Services Manager informing the user of the need to save his work. Then, to end a session, choose the log off option. You do not need to connect to TS70 through an RDP connection. You can send a message and log off a user from the console session on TS70. You do not need to reset PauloN's session. Resetting a session deletes it immediately, closing all programs without giving the user a last chance to save his work. You should reset a session only when it is unresponsive. You should not disconnect the session. Disconnecting the session leaves the session open and prevents the user from accessing his desktop to save his work.

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Contoso.com whose corporate network consists of a single Active Directory domain. The corporate network includes 10 servers running Windows Server 2008 Enterprise and 200 clients running Windows Vista Enterprise. All client computers are running Remote Desktop Connection 6.0. Your network includes a terminal server named TS40 that hosts a line-of-business application named App40. Many users connect to TS40 throughout the day to enter inventory-related data in App40. As many as 40 users can be connected to TS40 before the performance starts to degrade noticeably . Your manager informs you that some employees who connect to TS40 are using chat clients and other programs whose functions are unrelated to App40 or their jobs in general. Although chat clients are allowed in Fabrikam.com and on TS40, your manager wants to know which users are abusing this privilege and putting an unnecessary strain on the TS40 resources. He asks you to configure TS40 so that you can monitor and interact with user sessions without user permission. The current RDP-Tcp settings for TS40 are shown in the exhibit. You need to configure TS40 to meet your manager's request. What should you do? (Choose all that apply.)
1. Clear the Require User's Permission check box 2. Enable the Interact With The Session option. 3. Enable the Do Not Allow Remote Control option.
<Correct> <Correct>
4. Enable the Use Remote Control With The Following Settings option.
<Correct>
Explanation: You need to configure TS40 so that managers can monitor and interact with user sessions. To meet this requirement, select the Use Remote Control With The Following Settings option and then click Interact With The Session option in the Level Of Control area. You also need to configure TS40 so that these remote control actions can be performed without the user's permission. To meet this requirement, clear the Require User's Permission check box.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services server options. References: How to Setup SSL on IIS 7 IIS.NET Web site Link: http://www.iis.net/articles/view.aspx/IIS7/Managing-IIS7/Configuring-Security/Using-SSL/How-to-Setup-SSL-on-IIS7

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Contoso.com whose corporate network consists of a single Active Directory domain. Your job responsibilities include managing terminal servers and clients. Your network includes a terminal server named TSGame1 that is used to host gaming applications for users during lunch hour and other breaks. As many as 10 users can be connected to TSGame1 simultaneously to run gaming applications. Your manager reports that some users are abusing the privilege of playing games on TSGame1 and play for longer periods than is acceptable to management. She asks you to configure the server to log off users who stay connected to TSGame1 for longer than 15 minutes. How can you configure the session settings on TSGame1 to meet these requirements? To answer, configure the appropriate options in the dialog box. When you are finished, click OK in the dialog box. Explanation: You want to set a 15-minute limit on active sessions. To achieve this, you need to select the top Override User Settings check box and then choose 15 Minutes from the Active Session Limit drop-down list. You also want users to be logged off automatically when they reach this 15-minute limit. To accomplish this, you need to select the bottom Override User Settings check box and then choose the End Session option. You do not want to set a limit for disconnected or idle sessions. The question states a requirement to limit active sessions, not disconnected or idle sessions. You also do not want to choose the option to disconnect from the session when the session limit is reached. The question states a requirement to log off the sessions that reach the 15-minute mark, not merely disconnect them.

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named Tailspin Toys. The Tailspintoys.com network is composed of a single Active Directory domain. You have been assigned to deploy an application named App8 as a RemoteApp program. The program will be hosted on a terminal server named TS8. You want to deploy App8 so that users see a link to the RemoteApp program in the Start menu and on the user Desktop. You want to achieve this result without requiring user intervention. What should you do?
1. Create an MSI file for App8 and deploy the MSI file through Group Policy. 2. Create an RDP file for App8 and deploy the RDP file through Group Policy. 3. Create an MSI file for App8 and distribute the file through a network share. 4. Create an RDP file for App8 and distribute the file through a network share.
<Correct>
Explanation: You can use MSI files, also called Windows Installer packages, to install shortcuts of RemoteApp programs in the Start Menu and on the Desktop. To install these shortcuts without requiring users to run the Windows Installer manually, you can deploy the program through Group Policy by using the MSI file. Distributing or deploying an RDP file will not install shortcuts automatically to the RemoteApp program in the Start menu and on the Desktop. Distributing the MSI file through a network share would enable users to install the RemoteApp program shortcuts but only after user intervention. (Users would have to run the Windows Installer packages manually.)

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named Adventure Works. The Adventure-works.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and supporting terminal servers. You have been asked to deploy a RemoteApp program named App13 on a terminal server named TS13. The plan is to have users connect to App13 through TS Web Access on a server named WebApp3. You are a member of the local Administrators group on TS13. You install App13 on TS13 and add the program to the list of RemoteApp programs in TS RemoteApp Manager. You then connect to the TS Web Access site on WebApp3, but you do not see any option to point TS Web Access to TS13. You want to configure TS Web Access on WebApp3 to point to TS13. Which of the following procedures will accomplish this goal?
1. Ask a member of the Administrators group on WebApp3 to add your user account to the TS Web Access Administrators security group on WebApp3. <Correct> 2. In TS RemoteApp Manager on TS13, configure App13 with the option to be displayed in TS Web Access. 3. Add TS13 to the TS Web Access Computers security group on WebApp3. 4. Add WebApp3 to the TS Web Access Computers security group on TS13.
Explanation: To configure TS Web Access to point to a remote server, you need to access the settings available through the Configuration tab on the TS Web Access page. This tab is visible only if you are a member of the Administrators security group or the TS Web Access Administrators security group on the TS Web Access server. If you need to modify the TS Web Access configuration and do not see this tab, you need to be added to one of these two local groups. You do not need to configure App13 with the option to be displayed in TS Web Access. The goal in this question is to configure TS Web Access on WebApp3 to point to TS13. Verifying the properties of App13 in TS RemoteApp Manager on TS13 does not affect the configuration of TS Web Access on WebApp3. You do not need to add WebApp3 to the TS Web Access Computers security group on TS13 yet. This procedure is indeed a necessary step in this configuration process. However, the specific requirements of this question are that you need to configure TS Web Access on WebApp3 to point to TS13. This option will not achieve this specific result. You do not need to add TS13 to the TS Web Access Computers security group on WebApp3. This step would allow TS13 to read the list of RemoteApp programs configured on WebApp3, but it would not enable you to see the Configuration tab in TS Remote Access.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com Your responsibilities include managing terminal servers and clients. Your company network includes a terminal server farm named TSFARM4. The farm includes four servers, named TS11, TS12, TS13, and TS14. The TS Session Broker role service is installed on TS11, and you have added all four servers to the Session Directory Computers local group on TS11. You are using round-robin in DNS to distribute the initial client requests among the terminal servers. You are not using any additional load-balancing technology. Users complain that they cannot re-connect to disconnected Terminal Services sessions on TSFARM4. You want users to be able to re-connect to disconnected Terminal Services sessions on the server farm. Which of the following steps is most likely to fix the problem?
1. On each server, assign a value of 100 for the relative weight of the server in the farm. 2. On all four servers, disable the option to use IP address redirection. 3. On each server, enable the option to join a farm in TS Session Broker. <Correct>
4. At the DNS server for Contoso.com, add DNS entries for TSFARM4 that point to each member server's IP address.
Explanation: If users cannot re-connect to disconnected Terminal Services sessions, no TS Session Broker farm has been configured. After you install the TS Session Broker role service on a server and add the member servers to the Session Directory Computers local group on that server, you need to configure each member server to join the farm. You can find this option in the Terminal Services Configuration console. You should disable the option to use IP address redirection only if you have implemented a load-balancing solution that supports the use of TS Session Broker routing tokens. Clearing this option would prevent TS Session Broker from distributing client requests, and it would not help users re-connect to disconnected TS sessions. Adding DNS entries for each server member enables initial client requests to be distributed evenly among all servers. It does not allow users to re-connect to disconnected sessions. Assigning each server a relative weight of 100 would configure TS Session Broker to redistribute client requests equitably among all server members. It would not enable users to re-connect to disconnected sessions.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 A closer look at Session Broker load balancing in Windows Server 2008 Brianmadden.com Link: http://www.brianmadden.com/content/article/A-closer-look-at-Session-Broker-load-balancing-in-Windows-Server-2008 Windows Server 2008 RC0 TS Session Broker Load Balancing Step-by-Step Guide Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/f9fe9c74-77f5-4bba-a6b9-433d823bbfbd1033.mspx? mfr=true Terminal Services Session Broker (TS Session Broker) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/902a6081-9ecd-45ec-96ee-f51097d71c8c1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Contoso.com whose corporate network consists of a single Active Directory domain. Your job responsibilities include managing terminal servers and clients. Your network includes a terminal server named TS90 that is used to host a line-of-business application named App90. As many as 20 users can be connected to TS90 simultaneously to run App90. However, when 15 or more users have sessions on the TS90, the performance of App90 is noticeably degraded. Although you have instructed users to log off their Remote Desktop sessions on TS90 when they are finished with their work, you notice that many users simply disconnect by closing their Remote Desktop windows. As a result, during work hours, typically 5-10 disconnected sessions remain hosted on TS90. You want to prevent users from keeping disconnected sessions on TS90 and to preserve the limited resources of TS90 for connected user sessions. How can you configure the session settings on TS90 to log off disconnected sessions automatically after five minutes? To answer, configure the appropriate options in the dialog box. When you are finished, click OK in the dialog box. Explanation: You want to set a five-minute limit on disconnected sessions. To do this, you need to select the top Override User Settings check box and then choose 5 Minutes from the End A Disconnected Session drop-down list. You do not want to set a limit for active sessions. The question states a requirement to limit disconnected sessions, not active sessions. (Active sessions are always connected.) You do not want to set a limit for idle sessions. The question states a requirement to limit just disconnected sessions, not all idle sessions. (Some idle sessions are connected.) You do not need to associate an action with active session limits. This setting does not affect disconnected sessions.

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com whose corporate network consists of a single Active Directory domain. The client network includes 10 servers running Windows Server 2008 Enterprise, two of which are running Terminal Services, and 200 clients running Windows Vista Enterprise. All client computers are running Remote Desktop Connection 6.0. The two terminal servers in your organization, TS1 and TS2, host line-of-business applications. Your manager has asked you to configure the terminal servers and clients so that users do not have to enter credentials to connect to the terminal servers. She asks you to configure Terminal Services connections so that each user's Windows credentials are automatically supplied to all current and future terminal servers in the Fabrikam.com network. You want to configure Terminal Services clients so that they will automatically supply each user's Windows credentials to terminal servers. What should you do?
1. In a domain-level Group Policy Object, disable the Deny Delegating Default Credentials policy setting. 2. In a domain-level Group Policy Object, disable the Deny Delegating Saved Credentials policy setting. 3. In a domain-level Group Policy Object, enable the Allow Delegating Saved Credentials policy setting. 4. In a domain-level Group Policy Object, enable the Allow Delegating Default Credentials policy setting. <Correct>
Explanation: By default, users have to enter credentials when they connect to a terminal server. However, if you enable the Allow Delegating Default Credentials policy setting in Group Policy, the clients that fall within the scope of the policy will connect to the terminal servers you specify in the policy by using each user's default Windows credentials. This feature is known as Single Sign-on (SSO). You do not want to disable the Deny Delegating Default Credentials policy setting because this step will not enable SSO; it will merely prevent other policies from disabling SSO. The Allow Delegating Saved Credentials and Deny Delegating Saved Credentials policy settings affect whether a Terminal Services client can use saved credentials (not default Windows credentials) to connect to terminal servers.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services server options. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 1 Single Sign-On for Terminal Services Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/e97073f7-98b0-44a8-babd-5832996fb6aa1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist. As part of your job, you deploy and support applications for users throughout your organization. You have been asked to deploy an application named App7 as a RemoteApp program on a terminal server named TS7. The setup program for App7 is named App7setup.exe. You need to install App7 so that the application can support multiple users. Which of these methods should you use to install App7?
1. Install App7 through Control Panel, using the Install Application On Terminal Server option. 2. Install App7 with a custom script. 3. Install App7 by directly executing App7setup.exe. 4. Install App7 through a Group Policy.
<Correct>
Explanation: If you want to deploy an application on a terminal server so that the application can support multiple users, you can install the program by using the Install Application On Terminal Server program in Control Panel. You should not install the program by using the setup program because it is an executable (.exe) file. You should not use this type of file to install a program for multiple users on a terminal server without using the Control Panel option or the Chguser command. Deploying the program through Group Policy will not enable it to support multiple users on a terminal server. It is not necessary to write a script to ensure multiuser support. You need only to install the program by using the Control Panel option.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Trey Research. The Treyresearch.net network is composed of a single Active Directory domain. Your job responsibilities include deploying and configuring terminal servers. You install and configure a new TS Gateway server named TSGate6 in the company's perimeter network. During installation, you choose the option to create a self-signed certificate on TSGate6. Your goal is to enable authorized users to connect from outside the corporate network to a terminal server named TS6 through the new TS Gateway. You want to test TS Gateway from a client named Client3, which is a member of the Treyresearch.net Active Directory domain. Client3 is found in a remote location external to the corporate network. Which of the following steps must you take to connect to TS6 from Client3 through the new TS Gateway?
1. Install a certificate from Client3 into the Trusted Root Certificate Authorities store on TSGate6. 2. Install a certificate from TS6 into the Trusted Root Certificate Authorities store on Client3. 3. Install a certificate from the Treyresearch.net Certificate Authority into the Trusted Root Certificate Authorities store on Client3. 4. Install a certificate from TSGate6 into the Trusted Root Certificate Authorities store on Client3. <Correct>
Explanation: A TS Gateway server communicates with its clients through the Secure Sockets Layer (SSL) protocol, which requires a server certificate. This SSL certificate can originate from a trusted third-party Certificate Authority (CA) or a trusted local CA such as Certificate Services. In addition, for testing purposes, the TS Gateway server can also generate its own server certificate. During the installation of TSGate6, you chose the option to create a self-signed certificate for SSL communications. Self-signed certificates are not trusted by any clients by default. For clients to be able to communicate with TSGate6, therefore, you need to install that server certificate in the Trusted Root Certificate Authorities store on each client. When the TS client trusts the source of the server certificate, the client can establish an SSL connection with TS Gateway.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 Terminal Services Gateway (TS Gateway) Microsoft TechNet Link: http://technet2.microsoft.com/WindowsServer2008/en/library/9da3742f-699d-4476-b050-c50aa14aaf081033.mspx

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named Blue Yonder Airlines. The Blueyonderairlines.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and supporting user applications. You want to deploy a RemoteApp program named App12 on a terminal server named TS12. You plan to have users connect to App12 through TS Web Access. You install App12 on TS12, but users report that when they attempt to connect to the TS Web Access page on TS12, they receive an error. You want users to be able to run App12 by connecting to the TS Web Access site on TS12. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. In TS RemoteApp Manager on TS12, configure a Windows Installer package for App12, and then deploy the program through Group Policy. 2. Install the TS Web Access role service on TS12. <Correct>
3. In TS RemoteApp Manager on TS12, add App12 to the list of RemoteApp programs. <Correct> 4. In TS RemoteApp Manager on TS12, configure App12 with the option to be displayed in TS Web Access. 5. Configure TS Web Access to point to TS12.
Explanation: If users are unable to connect to the TS Web Access site at all, it is likely that the TS Web Access role service has not been added on TS12. In addition, if you want a link for App12 to display on the TS Web Access page, you will need to add App12 to the list of RemoteApp programs on TS12. You do not need to configure TS Web Access to point to TS12. This step is unnecessary whenever TS Web Access and the terminal server hosting the RemoteApp programs are located on the same computer. You do not need to configure App12 with the option to be displayed in TS Web Access. This option is selected by default and, in the question scenario, you have not yet added App12 to the list of RemoteApp programs on TS12. You do not need to configure a Windows Installer package for App12. You want users to connect to App12 through TS Web Access. In such a case, a Windows Installer package is not useful.

______________________________________________________________________________________________________________ You are a network administrator in a company named Fabrikam.com. You have been asked to configure a server named TS3 to host an application named App3. App3 is a performance monitoring application that will enable you and a fellow administrator to monitor the network for unusual changes in latency and other performance measures. You both plan to use the Admin3 account to access TS3 through the Terminal Services Client (Mstsc.exe) and run App3. You will be accessing the application from any of 50 computers on your network. You do not foresee that any other users will be connecting to TS3. You need to determine how many Terminal Services client access licenses (CALs) to purchase for TS2 and which type of CALs to purchase. Which of the following options best suits your needs?
1. Install the Terminal Services server role and purchase at least 2 Terminal Services per-user CALs. 2. Enable Remote Desktop for Administration and purchase at least 2 per-user CALs. 3. Install the Terminal Services server role and purchase at least 50 Terminal Services per-device CALs. 4. Enable Remote Desktop for Administration and do not purchase any CALs. <Correct>
Explanation: Because only two users are going to be connecting to TS3 and because multiuser support for applications is not necessary, you do not need to install Terminal Services. The functionality needed can be provided by the Remote Desktop for Administration (RDA) feature. RDA is a built-in feature of Windows Server 2008 and does not require any client licenses.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 Overview of TS Licensing Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/ba9e2584-ee3f-49da-a3b3-85ef8854bc6e1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Adventure Works. The company network is composed of a single Active Directory domain. Your job responsibilities include supporting user applications. You have deployed a RemoteApp program named App4 on a server named TS4. Users connect to App4 through an RDP file that you have distributed through a network share. TS4 is reserved for hosting App4, and you have no plans to deploy any other application on this server. Group Policy has been configured so that Terminal Services clients connecting from outside the network are directed to a Terminal Services gateway. However, users report that they are unable to launch App4 from outside the corporate network. Users currently connecting from both inside and outside the corporate network are able to launch RemoteApp programs hosted on other servers. Also, users connecting from within the corporate network are able to launch App4 without any difficulty. You want users who connect either from inside or outside the corporate network to be able to run App4 on their computers. You want to achieve this with the least amount of administrative difficulty. Which of the following procedures will accomplish this goal?
1. Using TS RemoteApp Manager on TS4, create a new RDP file that is configured with the option to detect TS Gateway server settings automatically. Distribute this new file to all users through a network share. <Correct> 2. Using TS RemoteApp Manager on TS4, create a new RDP file that is configured with the option to bypass the TS Gateway server for local addresses. Distribute this new file to all users through a network share. 3. Using TS RemoteApp Manager on TS4, configure the TS Gateway settings to bypass the TS Gateway server for local addresses. 4. Configure Group Policy so that all Terminal Services clients use the company's TS Gateway.
Explanation: The problem reported is restricted to external users: External users cannot connect specifically to App4, although they can connect to other internal programs. Therefore, the TS Gateway settings for App4 are most likely configured incorrectly. With this in mind, configure the RDP file for App4 so that only external users are directed through TS Gateway. You know that Group Policy settings already direct external clients to TS Gateway; you just need to apply these Group Policy settings to each user. When you configure an RDP file to detect TS Gateway server settings automatically, the RDP file will adopt the TS Gateway settings defined in Group Policy. This step achieves the desired result. Configuring an RDP file with the option to bypass the TS Gateway server for local addresses will have no effect on remote users. This only ensures that internal users do not use the gateway. You also do not want to configure Group Policy so that all Terminal Services clients use the company's TS Gateway; you want only external users to use TS Gateway.
Objective: Configuring Terminal Services Sub Objective(s): Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp). References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lessons 2 and 3 Terminal Services RemoteApp (TS RemoteApp) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/57995ee7-e204-45a4-bcee-5d1f4a51a09f1033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso Pharmaceuticals. Your responsibilities include supporting terminal servers and clients. Recently, users have been complaining about the performance of their Terminal Services sessions on a terminal server named TS7. You open Terminal Services Manager and find many disconnected sessions from different users. You want to prevent users from maintaining disconnected Terminal Services sessions on TS7. Which step should you take to accomplish this goal?
1. In Terminal Services configuration, configure TS7 to end sessions that are disconnected. 2. In Terminal Services Configuration, configure TS7 to restrict each user to a single session. 3. In Terminal Services Configuration, configure TS7 to enable reconnections but prevent new logons.
<Correct>
4. In Terminal Services Configuration, configure TS7 to enable reconnections but prevent new logons until the server is restarted.
Explanation: If you want to prevent users from maintaining disconnected sessions on TS7, you need to select the option to end disconnected sessions on TS7. Restricting each user to a single session will not prevent users from holding a disconnected session. It will only limit users to one session that might be connected or disconnected. The options to enable reconnections but prevent new logons will not keep users from maintaining disconnected sessions on TS7. These options will only prevent users from logging on to the server.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com. Your job responsibilities include supporting terminal servers and clients. The Contoso.com domain includes several terminal servers and a Terminal Services license server named TSL-5. These terminal servers host various applications for users in the Contoso.com domain. Two hundred users access these applications from as many as 175 client computers located throughout the Contoso.com network. To support these network applications, you have purchased and installed 200 Terminal Services per-device client access licenses (CALs). All your terminal servers, including TSL-5, are running Windows Server 2008. Recently, you have deployed a terminal server named TS8 in the Contoso.com domain to host a new application named App8. After several days, you begin to receive messages on TS8, indicating that Terminal Services will stop functioning if licensing is not configured. In the Terminal Services Configuration console on TS8, you open the Properties dialog box and select the Licensing tab, as shown in the exhibit. You have verified that TS8 and TSL-5 can communicate with each other on the network. You have also verified that the terminal servers in the Contoso.com domain can automatically discover TSL-5 and have been functioning properly for at least one year. You want Terminal Services on TS8 to locate the license server on TSL-5 and obtain client licenses. What should you do?
1. Purchase more per-device CALs. 2. On TS8, set the Terminal Services licensing mode to Per-Device. 3. Purchase more per-user CALs. 4. On TS8, set the Terminal Services discovery mode to Use the specified license servers and then specify TSL5.contoso.com as the license server. <Correct>
Explanation: The question states that per-device CALs have been purchased for the license server, but TS8 has been configured to use the Per-User licensing mode. To fix this problem, you merely need to reconfigure the licensing mode as Per-Device. It is not necessary to purchase either per-device or per-user licenses because there are sufficient per-device licenses (two hundred licenses for 175 computers). Specifying the license server manually will not fix the problem because TSL-5 has installed per-device licenses, not per-user licenses, and TS8 is currently configured to request per-user licenses.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 1 Configuring License Settings on a Terminal Server Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/82675181-0fab-4e71-a2d0-9432312a6d6e1033.mspx? mfr=true

______________________________________________________________________________________________________________ You work as an IT support specialist in a company named A Datum Corporation. The Adatum.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and supporting user applications. You install several applications to be used as RemoteApp programs on a terminal server named TS11, and you add these programs to the list of RemoteApp programs. On a server named WebApp2, you configure TS Web Access to point to TS11. However, one of the RemoteApp programs installed on TS11, named App11, does not display on the TS Web Access site on WebApp2. You want users to access App11 and all other RemoteApp programs installed on TS11 by browsing to the TS Web Access page on WebApp2. What steps should you take to achieve this goal?
1. Add TS11 to the TS Web Access Computers security group on WebApp2. 2. Configure TS Web Access on WebApp2 to point to TS11. 3. Add WebApp2 to the TS Web Access Computers security group on TS11. 4. On TS11, configure App11 with the option to make the program available in TS Web Access. <Correct>
Explanation: In this question scenario, all RemoteApp programs installed on TS11 except for App11 are displayed on the TS Web Access page on WebApp2. Therefore, App11 must be configured differently from the other RemoteApp applications. For each RemoteApp program to be available in TS Web Access, the program must be configured with the option to be available in TS Web Access. You can find this option in TS RemoteApp Manager by selecting the RemoteApp program and then clicking Properties in the Actions pane. You do not need to add WebApp2 to the TS Web Access Computers security group on TS11. The computer must already be added to the group because other RemoteApp programs are being displayed in TS Web Access. You do not need to add TS11 to the TS Web Access Computers security group on WebApp2. This step is not necessary in this scenario because WebApp2 needs to read the list of RemoteApp programs on TS11, not vice versa. You do not need to configure TS Web Access on WebApp2 to point to TS11. TS Web Access on WebApp2 must already be pointing to TS11 because all RemoteApp programs installed on TS11 except for App11 are being displayed on the TS Web Access page.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Consolidated Messenger. The company network is composed of a single Active Directory domain. Your job responsibilities include supporting user applications. A server named TS5 in your organization currently is running Terminal Services. You want authorized users to be able to launch a desktop on TS5 by clicking an icon on the TS Web Access site. Which of the following steps will enable users to launch a desktop on TS5 by clicking an icon on the TS Web Access site?
1. In TS RemoteApp Manager on TS5, configure the TS Gateway settings to detect TS Gateway server settings automatically.
2. In TS RemoteApp Manager on TS5, configure the Terminal Server Settings with the option to show a remote desktop connection to the terminal server in TS Web Access. <Correct> 3. In TS RemoteApp Manager on TS5, add Remote Desktop Connection to the list of RemoteApp programs. 4. In TS RemoteApp Manager on TS5, configure the Terminal Server Settings to enable users to start both listed and unlisted programs on initial connection.
Explanation: To have TS Web Access display a link to the terminal server desktop, you need to configure the Terminal Server Settings in TS RemoteApp Manager. In Terminal Server Settings, select the option to show a remote desktop connection to the terminal server in TS Web Access. None of the other answer choices achieve this desired result.

______________________________________________________________________________________________________________ You work as a network support specialist for a company named Fabrikam.com whose corporate network consists of a single Active Directory domain. The network includes 10 servers running Windows Server 2008 and 200 clients running Windows XP Professional. All client computers are running Remote Desktop Connection 6.0. Recently, you deployed a terminal server named TS60, which will be used to host a line-of-business application in the Fabrikam.com domain. However, in your preliminary testing, you have discovered that clients cannot connect to TS60. You have verified that all members of the Domain Users group in Active Directory are members of the Remote Desktop Users group on TS60. You have also verified that domain users can connect to other terminal servers deployed in your organization. You open RDP-Tcp Properties on TS60 and observe the dialog box shown in the exhibit. You want domain users in your organization to be able to connect to TS60 by using Remote Desktop Connection. What should you do?
1. Set the Encryption level option to Low. 2. Clear the option to allow connections only from computers running Remote Desktop with Network Level Authentication. <Correct> 3. Set the Security layer option to RDP Security Layer. 4. Create a self-signed certificate on TS60 and choose the option to select the certificate in RDP-Tcp Properties.
Explanation: The exhibit shows that TS60 has been configured to accept connections only from computers running Remote Desktop with Network Level Authentication (NLA). By default, Remote Desktop Connection 6.0 running on Windows XP Professional does not support NLA. Therefore, to allow users working on computers running Windows XP to connect to TS60, you should clear the option to require NLA. Changing the Security layer option to RDP Security Layer will have no effect. The Negotiate option already enables maximum compatibility with Remote Desktop clients. Changing the Encryption level option to Low will have no effect for the same reason. Creating a certificate will also have no effect because, as the exhibit shows, a self-signed (Auto-generated) certificate has already been created and selected.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com Your responsibilities include managing terminal servers and clients. Your company network includes a terminal server farm named TSFARM3. The farm includes four servers, named TS7, TS8, TS9, and TS10. The TS Session Broker role service is installed on TS7, and all four servers have been configured to use TS7 as the TS Session Broker server. You are using round robin in DNS to distribute the initial client requests among the terminal servers. You are not using any additional load-balancing technology. In Terminal Services Manager, you discover that there are many active sessions on TS7, TS9, and TS10 but no active sessions on TS8. You want client sessions to be distributed equally among all four servers. Which of the following steps is most likely to fix the problem?
1. On TS8, disable the option to use IP address redirection. 2. Add TS8 to the Session Directory Computers local group on TS7. <Correct>
3. At the DNS server for Contoso.com, add a DNS entry for TSFARM3 that points to the IP address of TS8. 4. On TS8, assign a value of 1 for the relative weight of the server in the farm.
Explanation: If TS8 is not a member of the Session Directory Computers local group on TS7, the TS Session Broker service on TS7 will not route any Terminal Services connections to TS8. Therefore, adding TS8 to this group is a potential solution to the problem. None of the other answer choices are potential solutions to the problem presented. You should disable the option to use IP address redirection only if you have implemented a load-balancing solution that supports TS Session Broker routing tokens. In this particular case, because you have implemented no load-balancing solution beyond DNS round robin and TS Session Broker itself, disabling this option is much more likely to cause a problem than to solve one. Adding a DNS entry for TSFARM3 that points to the IP address of TS8 will help distribute some initial client requests for TSFARM3 to TS8. However, because TS8 is a member of a TS Session Broker farm, the client requests are then redistributed among all four members. Therefore, adding this record cannot solve the problem described. Assigning TS8 a relative weight of 1 would likely reduce client sessions on TS8. The default weight assigned to each server is 100. Therefore, a server assigned a value of 1 would typically receive 1 percent of the normal client session load.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services load balancing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 A closer look at Session Broker load balancing in Windows Server 2008 Brianmadden.com Link: http://www.brianmadden.com/content/article/A-closer-look-at-Session-Broker-load-balancing-in-Windows-Server-2008 Windows Server 2008 RC0 TS Session Broker Load Balancing Step-by-Step Guide Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/f9fe9c74-77f5-4bba-a6b9-433d823bbfbd1033.mspx? mfr=true Terminal Services Session Broker (TS Session Broker) Microsoft TechNet
Link: http://technet2.microsoft.com/windowsserver2008/en/library/902a6081-9ecd-45ec-96ee-f51097d71c8c1033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Fabrikam.com. The Fabrikam.com network includes a single Active Directory forest that is composed of two Active Directory domains, Fabrikam.com and Contoso.com. The Fabrikam.com domain includes several terminal servers and a Terminal Services license server named TSL-1. These terminal servers are used to host various applications for users in the Fabrikam.com domain. All of your terminal servers, including TSL-1, are running Windows Server 2003. On the Contoso.com network, you deploy a new terminal server named TS-20. TS-20 is running Windows Server 2008. You attempt to specify TSL-1 as the license server for TS-20, but TS-20 is unable to verify that TSL-1 is a valid license server. You need to connect TS-20 to TSL-1 or to another valid license server. Which of the following steps is most likely to enable you to accomplish this goal?
1. Set the discovery scope on TSL-1 to Domain. 2. Install a new license server running Windows Server 2008 in the Fabrikam.com domain. 3. Set the discovery scope on TSL-1 to Forest. 4. Install a new license server running Windows Server 2003 in the Contoso.com domain. <Correct>
Explanation: A Windows Server 2008 terminal server cannot communicate with a license server running Windows Server 2003. Of the choices presented, the best way to solve the problem described is to install a license server on a computer running Windows Server 2008. An alternative not mentioned is to upgrade the original license server.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lesson 2 TS Licensing Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/2a9fd6e5-f880-4a9b-b492-e4f6f7983e951033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Fabrikam.com. You have been tasked with deploying a terminal server named TS1 to host an application named App1. You expect between 10 and 20 users to connect to TS1 each week from any of five terminal stations located at the Fabrikam.com front desk. Your network does not currently include a terminal server, and you do not foresee a need to support any other Terminal Services clients in the organization. You need to determine how many Terminal Services client access licenses (CALs) to purchase for TS1 and which type of CALs to purchase. Which of the following options best suits your needs?
1. Purchase 5 Terminal Services per-device CALs. 2. Purchase 10 Terminal Services per-user CALs. 3. Purchase 10 Terminal Services per-device CALs. 4. Purchase 20 Terminal Services per-user CALs.
<Correct>
Explanation: You should purchase per-device CALs when you need to support fewer Terminal Services client computers than users, as is the case here. Because you need to support only five computers, you need to purchase only five per-device licenses.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lessons 1 and 2 Terminal Services Licensing (TS Licensing) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/04bf6206-1546-4326-a9a0-b32bc50aeb8d1033.mspx? mfr=true Terminal Services Client Access Licenses (TS CALs) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/aa57d355-5b86-4229-9296-a7fcce77dea71033.mspx? mfr=true

______________________________________________________________________________________________________________ You are a network administrator for a company named Contoso.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS3 to host several applications. You want to configure a specific application named App3 to use no more than 40 percent of the processing power of TS3. What should you do?
1. In Windows System Resource Manager, add App3 as a Process Matching Criteria and select a custom Resource Allocation Policy as the managing policy. <Correct> 2. In Windows System Resource Manager, add App3 as a Process Matching Criteria and select Equal_Per_Session as the managing policy. 3. In Windows System Resource Manager, add App3 as a Process Matching Criteria and select Equal_Per_User as the managing policy. 4. In Windows System Resource Manager, add App3 as a Process Matching Criteria and select Equal_Per_Process as the managing policy.
Explanation: When you want to control the resources allocated to a specific application, process, user, or group, you need to add those elements to a Process Matching Criteria and then use that criterion in a custom Resource Allocation Policy. Once you have created the policy, then you must select that policy as the managing policy. The other answer choices all refer to built-in Resource Allocation policies. You cannot configure or customize these policies to restrict resource allocation to a specific application.

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Contoso.com. You have been tasked with deploying a terminal server named TS2 to host an application named App2. You expect between 30 and 50 users to connect to TS2 each week from any of 100 terminal stations located throughout your organization. Your network does not include a terminal server currently, and you do not foresee a need to support any other Terminal Services clients in your organization. You need to determine how many Terminal Services client access licenses (CALs) to purchase for TS2 and which type of CALs to purchase. Which of the following options best suits your needs?
1. Purchase 100 Terminal Services per-device CALs. 2. Purchase 50 Terminal Services per-user CALs. 3. Purchase 30 Terminal Services per-user CALs. 4. Purchase 50 Terminal Services per-device CALs. <Correct>
Explanation: You should purchase per-user CALs when you need to support fewer Terminal Services users than Terminal Services client computers, as is the case here. You should also purchase enough CALs to support the maximum number of users that you anticipate will connect to Terminal Services.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services licensing. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 3 - Lessons 1 and 2 Terminal Services Licensing (TS Licensing) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/04bf6206-1546-4326-a9a0-b32bc50aeb8d1033.mspx? mfr=true Terminal Services Client Access Licenses (TS CALs) Microsoft TechNet Link: http://technet2.microsoft.com/windowsserver2008/en/library/aa57d355-5b86-4229-9296-a7fcce77dea71033.mspx? mfr=true

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Consolidated Messenger. Your responsibilities include supporting terminal servers and clients. Recently, users have been complaining about the performance of their Terminal Services sessions on a terminal server named TS8. You open Terminal Services Manager on TS8 and discover many sessions that have not shown any activity for days. You want to configure TS8 to end user sessions that remain inactive for more than one day. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. On TS8, choose the option to disconnect when the session limit is reached. 2. On TS8, set the Idle Session Limit to one day. 3. On TS8, set the Active Session Limit to one day. 4. On TS8, choose the option to end a disconnected session after one day. 5. On TS8, choose the option to end the session when the session limit is reached. <Correct> <Correct>
Explanation: To end user sessions that have been inactive for more than one day, you need to set the Idle Session Limit and then choose the option to end the session once this limit is reached. Choosing the option to end a disconnected session after one day will not affect sessions that are inactive yet remain connected. You want to limit the length of all inactive sessions, both connected and disconnected. Setting the Active Session Limit to one day will not limit inactive sessions. It will only disconnect or end user sessions that are active for one day. Choosing the option to disconnect when the session limit is reached will not end inactive user sessions.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Contoso.com. The Contoso.com network is composed of a single Active Directory domain. Your job responsibilities include deploying and configuring terminal servers. You install and configure a new TS Gateway server named TSGate7 in the company's perimeter network. During installation, you specify a server certificate obtained from the local certificate authority integrated into the Contoso.com Active Directory domain. Your goal is to enable authorized users to connect from outside the corporate network to terminal server resources through the new TS Gateway. Remote users will be connecting from only portable computers that are members of the Contoso.com domain. Which of the following steps should you take to enable external clients that are members of the Contoso.com domain to connect to resources through the new TS Gateway?
1. Instruct users connecting from computers outside the corporate network to configure Remote Desktop Connection so that TS Gateway server settings are detected automatically. 2. Instruct users connecting from computers outside the corporate network to specify TSGate7.contoso.com as TS Gateway in Remote Desktop Connection. <Correct> 3. Install the server certificate for TSGate7 in the Trusted Root Certificate Authorities store on the external clients. 4. Instruct users connecting from computers outside the corporate network to disable the option in Remote Desktop Connection to bypass the TS Gateway server for local addresses.
Explanation: In this case, users who want to connect to terminal server resources from locations outside the corporate network must specify the TS Gateway server in Remote Desktop Connection. You cannot choose the option to detect TS Gateway server settings automatically because this option is useful only when the settings are defined in Group Policy. You do not need to disable the option to bypass TS Gateway for local addresses. Because you are not connecting to local addresses, changing this option will have no effect for users connecting from outside the network. The remote client computers are members of the Contoso.com domain and, therefore, already trust the source of the server certificate used by TSGate7, so it is not necessary to install any server certificates on the clients.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 What is a Terminal Services Gateway server? Windows Help Link: http://windowshelp.microsoft.com/Windows/en-US/Help/011fcc70-fdb7-43fc-ae08-b33169b3f6961033.mspx

______________________________________________________________________________________________________________ You are an IT support specialist in a company named Wide World Importers. Your responsibilities include supporting terminal servers and clients. Users in your company connect to several terminal servers to run applications. Some of these applications require audio to be streamed through the client session, but some users are complaining that they are not able to receive audio through Terminal Services sessions. You want to allow users to enable audio redirection through Terminal Services sessions. What should you do?
1. In Group Policy, configure the policy setting to allow audio redirection as Not Configured. 2. Enable audio redirection on the terminal servers in your organization. 3. In Group Policy, configure the policy setting to allow audio redirection as Enabled. 4. In Group Policy, configure the policy setting to allow audio redirection as Disabled. <Correct>
Explanation: To allow users to determine their own audio redirection settings, you need to enable audio redirection in Group Policy. If you disable audio redirection in Group Policy, you will prevent users from enabling audio redirection. If you leave the policy setting as Not Configured, administrators will be able to prevent audio redirection on each individual server. If you enable audio redirection individually on each terminal server, these settings are not enforced and can be changed at any time. In addition, this method is inefficient from an administrative point of view.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Blue Yonder Airlines. The company network is composed of a single Active Directory domain. Your job responsibilities include supporting user applications. You are hosting a RemoteApp program named App3 on a server named TS3. Users connect to App3 through an RDP file that you have distributed through a network share. TS3 is reserved for hosting App3, and you have no plans to deploy any other application on this server. Users complain that they are not able to copy and paste items from App3 to other programs running on their computers. You want to enable users to copy and paste items from App3 to other programs running on their computers, and you want to achieve this with the least amount of administrative effort. What should you do?
1. Configure the RDP Settings in TS RemoteApp Manager so that the Clipboard setting is enabled. Inform users of the change and tell them to access App3 by using the same RDP file as they used before. 2. Configure the RDP Settings in TS RemoteApp Manager so that the Clipboard setting is disabled. Inform users of the change and tell them to access App3 by using the same RDP file as they used before. 3. Configure the RDP Settings in TS RemoteApp Manager so that the Clipboard setting is enabled. Create a new RDP file for App3 and then distribute the file to users through a network share. <Correct> 4. Configure the RDP Settings in TS RemoteApp Manager so that the Clipboard setting is disabled. Create a new RDP file for App3 and then distribute the file to users through a network share.
Explanation: To enable users to copy and paste between a Terminal Services session and a client computer, you need to enable (not disable) the Clipboard option. In addition, if you change any RDP settings in TS RemoteApp Manager, you will need to recreate the RDP file. The old RDP file will preserve the old server settings.

______________________________________________________________________________________________________________ You work as an IT support specialist for a company named Tailspin Toys. The Tailspintoys.com network is composed of a single Active Directory domain that is located on a single subnet in the 10.0.10.0/24 address range. Your job responsibilities include deploying and configuring terminal servers on this corporate network. You are in the process of testing the deployment of a new TS Gateway server named TSGate5. Your goal is to enable authorized users to connect to a terminal server named TS5 through the new TS Gateway server. On a client computer named Client2 within the Tailspintoys.com network, you configure Remote Desktop Connection to use TSGate5. Which of the following options must you also select on Client2 to test the new TS Gateway?
1. Disable the option to use your TS Gateway credentials for the remote computer. 2. Enable the option to use your TS Gateway credentials for the remote computer. 3. Enable the option to bypass the TS Gateway server for local addresses. 4. Disable the option to bypass the TS Gateway server for local addresses. <Correct>
Explanation: Your goal is to test TSGate5. Because Client2 and the TS5 are located on the same subnet, you need to ensure that the option to bypass TS Gateway for local addresses is disabled. Otherwise, Client2 will connect to TS5 without using TSGate5. Changing the option to use your TS Gateway credentials will not help you test the new TS Gateway. It will only save the step of entering credentials at the destination terminal server.
Objective: Configuring Terminal Services Sub Objective(s): Configure Terminal Services Gateway. References: MCTS Self-Paced Training Kit (Exam 70-643): Configuring Windows Server 2008 Applications Infrastructure Chapter 4 - Lesson 2 What is a Terminal Services Gateway server? Windows Help Link: http://windowshelp.microsoft.com/Windows/en-US/Help/011fcc70-fdb7-43fc-ae08-b33169b3f6961033.mspx

______________________________________________________________________________________________________________ You are an IT support specialist for a company named Consolidated Messenger, whose network is composed of a single Active Directory domain. The Consolidatedmessenger.com network includes a server named TS2 that runs a finance application named App2. No other applications are hosted on TS2. Your company has deployed a new Terminal Services gateway named TSG1 in the company's perimeter network. Some members of the Finance department work at a branch office. You want to allow these Finance users at the branch office to access App2 through TSG1. Finance users working in the branch office are not currently able to use TSG1. What should you do? (Each correct answer presents part of the solution. Choose two.)
1. Configure a Terminal Services Resource Authorization Policy (TS RAP) that enables members of the Finance group to connect to TS2. <Correct> 2. Use Group Policy to enforce Remote Desktop Connection settings for members of the Finance group to use TSG1. 3. Configure TS Gateway to use HTTPS-HTTP bridging. 4. Configure a Remote Access Policy that enables members of the Finance group to access the Consolidatedmessenger.com network remotely. 5. Configure a Terminal Services Connection Authorization Policy (TS CAP) that enables members of the Finance group to connect to TSG1. <Correct>
Explanation: To enable external users to connect to a terminal server resource on the corporate network, you need both a TS CAP and a TS RAP. A TS CAP authorizes users to connect as far as TS Gateway. A TS RAP authorizes users to connect from TS Gateway to a specific terminal server resource on the internal network. You do not want to force all members of the Finance group to use TS Gateway because some members might be connecting from inside the corporate network. In addition, this solution does not address the problem that members of the Finance group are not yet authorized to connect to TSG1 or TS2. To authorize users to do that, you need a TS CAP and a TS RAP. A Remote Access Policy authorizes certain users to connect to a network through a virtual private network or dial-up connection. It does not enable users to connect to terminal server resources on a network from points outside that network. You do not want to configure TS Gateway to use HTTPS-HTTP bridging. HTTPS-HTTP bridging is used when you have configured a Secure Sockets Layer (SSL) termination device such as Internet Security and Acceleration (ISA) Server, and you do not want to enforce SSL communication between the SSL termination device and TS Gateway. Enabling this option does not allow users to connect to terminal server resources on a network from points outside that network.

______________________________________________________________________________________________________________ You are a network administrator for a company named Fabrikam.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS1 to host an application named App1. App1 includes some graphical rendering capabilities that can be processor-intensive. You want to ensure that users who are taking advantage of these graphical rendering features exhaust more than an equal share of TS1's processing power. How can you configure TS1 to share its processing power equally among users?
1. Install Windows System Resource Manager and set Equal_Per_User as the managing policy. 2. Install Windows System Resource Manager and set Equal_Per_Session as the managing policy. 3. Install Windows System Resource Manager and set Equal_Per_IISAppPool as the managing policy. 4. Install Windows System Resource Manager and set Equal_Per_Process as the managing policy.
<Correct>
Explanation: The Equal_Per_User policy sets a cap on processor usage by limiting all users to an equal share of the terminal server processor or processors. For example, if four users are running processes on the server, each user will be allocated 25 percent of the system resources to complete those processes. A user running a single application is allocated the same resources as a user running several applications. The Equal_Per_Process policy distributes processor time equally among all running processes, not among all users. The Equal_Per_Session policy distributes processor time equally among all user sessions, and because each user can have more than one session, this policy does not necessarily distribute resources equally among users. The Equal_Per_IISAppPool policy distributes the processor usage equally among all IIS application pools, not among all users.

______________________________________________________________________________________________________________ You are a network administrator for a company named Contoso.com. Your job responsibilities include managing terminal servers and clients. You have deployed a terminal server named TS5 to host several applications. You are concerned about the memory demands of an application named App5 that is running on TS5. You want to configure App5 to write an event log message whenever App5 uses more than 512 MB of RAM. Arrange the tasks in the list below in the order in which they should be performed to achieve your goal. Place the first task at the top of the list. Use the up and down buttons to rearrange items. Explanation: When you want to control the resources allocated to a specific application, process, user, or group, you need to add those elements to a Process Matching Criteria policy and then use those criteria in a custom Resource Allocation Policy. Therefore, you have to create the Process Matching Criteria policy before the Resource Allocation Policy that uses it. A Resource Allocation is a rule found in a Resource Allocation Policy that defines how much of a certain resource (processor or memory) should be allocated to a specific Process Matching Criteria policy. To create a policy that writes an event log message when App5 uses more than 512 MB of RAM, first select the option to create the policy and then add a new Resource Allocation that specifies App5. Next, configure the Resource Allocation with a memory limit of 512 MB of RAM and then choose the option to write an event log message when the memory limit is surpassed. This last step completes the configuration of the new Resource Allocation Policy. However, to meet your goal of using the policy, you finally need to set it as the managing policy.

Configuring TS Load Balancing and Drain Mode

Загружено:

Сведения о документе

Исходное описание:

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Configuring TS Load Balancing and Drain Mode

Загружено:

Авторское право:

Доступные форматы

TS: Windows Server 2008 Applications Infrastructure, Configuring

Question Number (ID) : 1 (jcm643P_2.3_06)

TS: Windows Server 2008 Applications Infrastructure, Configuring

Terminal Services Team Blog Link: http://blogs.msdn.com/ts/archive/2007/06/15/introducing-terminal-services-server-drain-mode.aspx

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

1. Configure TS Session Broker. 2. Configure failover clustering.

3. Configure round-robin distribution. 4. Configure Network Load Balancing.

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

1. XPS Viewer 2. Remote Differential Compression 3. Desktop Experience <Correct>

4. Quality Windows Audio Video Experience

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

1. Tskill 2. Rwinsta 3. Change User (Chgusr) 4. Logoff <Correct> <Correct>

5. Change Logon (Chglogon)

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

1. 150 2. 200 3. 50 4. 300 <Correct>

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

1. Tskill 2. Rwinsta 3. Tsdicson 4. Quser <Correct>

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

Link: http://technet2.microsoft.com/windowsserver2008/en/library/902a6081-9ecd-45ec-96ee-f51097d71c8c1033.mspx? mfr=true

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring

TS: Windows Server 2008 Applications Infrastructure, Configuring