OK in your original description you say that AD2 has a tape devices but it is not clear if this is a library with more than one drive or whether some of the other servers will also be performing Backup to disk jobs even if they don't have a tape device.
"SYMC BACKUP EXEC 2010 SERVER WIN PER SERVER" is only used for each server that has a backup device (B2D folder or tape drive)
If you have a library with more than one tape drive you will also need the Library Expansion Option (LEO) licenses
An approriate remote agent license is required to backup any remote servers that will not directly control a tape or backup to disk device - by appropriate we mean if it is just a file server then a RAWS license, if however it is a SQL server you need a SQL license (which also covers the file system of that SQL server)
The Active Directory Recovery Agent license is only needed if you want to perform a Granular recovery from with AD - if you just want to DR AD then a standard remote agent or server license is all that is needed.
Also the San Shared Storage Option is used to Share a tape library between servers if your library is only connected to one media server you don't need this. We can't share disk based SAN storage using SSO.
One final comment Remote Agent Backups are not SAN aware so all data would be transfered over the LAN (or a backup LAN) between the remote and media servers. SAN backups need either a shared library with full media server installations or need an offhost configuration using the ADBO option and additonal software or hardware.
The above makes it difficult to fully answer your question as there is not enough information about the numbers of tape devices, which servers will access the tape devices and which servers are connected via the same SAN to a tape device etc.