Home » Microsoft » 70-415 » What should you configure?
Your network contains a Remote Desktop Services (RDS) session collection that is used by all users.
Users in the sales department access the session collection by using a Remote Desktop Gateway (RD Gateway) server.
Sales users often establish Remote Desktop connections to the internal network from their customers’ offices.
You need to prevent the sales users from copying files to the computers at the customers’ offices during the Remote Desktop sessions.
What should you configure?
More than one answer choice may achieve the goal. Select the BEST answer.
A. The Remote Desktop resource authorization policies (RD RAPs) from Remote Desktop Gateway Manager
B. A Group Policy object (GPO) linked to the organizational unit (OU) that contains the Remote Desktop Session Host (RD Session Host) server accounts
C. The properties of the collection from the Remote Desktop Services node in Server Manager
D. The Remote Desktop connection authorization policies (RD CAPs) from Remote Desktop Gateway Manager
E. A Group Policy object (GPO) linked to the organizational unit (OU) that contains the sales user accounts
Correct Answer: B
Explanation/Reference:
To enable or disable the redirection of local devices (such as a hard drive) and resources (this can also be configured through a GPO)
On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Session Host Configuration.
Under Connections, right-click the name of the connection, and then click Properties.
In the Properties dialog box for the connection, click the Client Settings tab.
Under Redirection, do one of the following for a given local device or resource category:
Select the check box to disable redirection of that type of local device or resource.
Clear the check box to enable redirection of that type of local device or resource.
Click OK.
Incorrect answers:
Not A: RD RAPs allow you to specify the internal network resources (computers) that remote users can connect to through an RD Gateway server.
Not D: They should all be allowed to connect, so using RD CAPs would be of no use.
RD CAPs allow you to specify who can connect to an RD Gateway server. You can specify a user group that exists on the local RD Gateway server or in Active Directory Domain Services. You can also specify other conditions that users must meet to access an RD Gateway server.
Reference: Make Local Devices and Resources Available in a Remote Session
https://technet.microsoft.com/en-us/library/cc770631.aspx
