Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Active Directory Certificate Services…

Question

Options

• ACredential roaming
• BRoaming user profiles
• CPFX files on an external USB disk
• DFolder Redirection

• A
  70% (21)
• B
  3% (1)
• C
  10% (3)
• D
  17% (5)

Explanation

You must enable Credential roaming so that whatever machine a user logs on to, their credentials This may use up extensive space in Active Directory. A certificate is enrolled to a computer where a user is logged on interactively. With credential roaming, the certificate and also the corresponding key pair are uploaded into the user's object in Active Directory about 10 seconds after certificate enrollment. If the domain consists of multiple domain controllers, Active Directory replication will make the updated user object available to all other domain controllers within the domain. If the same user who was previously enrolled for a certificate logs on to a different computer or terminal server session, credential roaming will synchronize the user's local certificate store with the certificates that are stored in Active Directory.

No community discussion yet for this question.