Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.
PS C:> (Get-ADForest).ForestMode Windows2008R2Forest
PS C:> (Get-ADDomain).DomainMode
Windows2008R2Domain PS C:>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You upgrade a domain controller to Windows Server 2016.
Does this meet the goal?
A. Yes
B. No
B correct answer
Device Registration requires Windows Server 2012 R2 forest schema (not just domain schema).
References:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service
B
I’m sorry, updating Windows to version 2016, adprep.exe does not run automatically, it must be performed manually. Therefore, the letter B is correct.
No. Device registration requires a forest functional level of Windows Server 2012R2. This is not automatic with an upgrade to Server 2016. The administrator must take further action to configure this. The question implies that it would be an automatic forest upgrade. It is not automatic.
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels
However, it is understood that if the administrator upgraded the Domain Controller to Windows Server 2016, it is because now, the functional level of the forest has also been updated.
Upgrading schema or replacing all domain controllers with new version is not good enough. You need to change forest level which is not mention here. Schema upgrade is not the same thing as forest level raise.
right?
E4E5E6