Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012. Server1 contains a virtual machine named VM1 that runs Windows
Server 2012.
You need to ensure that a user named User1 can install Windows features on VM1. The solution must
minimize the number of permissions assigned to User1.
To which group should you add User1?
A.
Administrators on VM1
B.
Power Users on VM1
C.
Hyper-V Administrators on Server1
D.
Server Operators on Server1
Explanation:
In Windows Server® 2012, the Server Manager consoleand Windows PowerShell® cmdlets for
ServerManager allow installation of roles and features to local or remote servers, or offline virtual hard disks
(VHDs).
You can install multiple roles and features on a single remote server or offline VHD in a single Add Roles
andFeatures Wizard or Windows PowerShell session.
You must be logged on to a server as an administrator to install or uninstall roles, role services, andfeatures. If
you are logged on to the local computer with an account that does not have administrator rights onyourtarget
server, right-click the target server in the Servers tile, and then click Manage As to provide anaccount that has
administrator rights.
The server on which you want to mount an offline VHD must be added toServer Manager, and you must have
Administrator rights on that server. http://technet.microsoft.com/en-us/library/hh831809.aspx
Shouldn’t the answer be C? The “explanation” says you have to log in the server as an administrator.
See my note below.
@johnny, User1 doesn’t need permissions to the VM through Hyper-V. User1 only needs to install features on VM1. You need local administrator rights to install features. Hence the minimal rights for User1 for this action would be answer A.
That makes sense if we disregard the explanation that comes with the answer.
Thanks for the quick response.
I think its C.
http://technet.microsoft.com/en-us/library/hh831410.aspx
I think answer is A. The Hyper-V administrator has no special rights inside the O/S pf VMs as I understand it.
(A) from this:
“You must be logged on to a server as an administrator to install or uninstall roles, role services, and features. If you are logged on to the local computer with an account that does not have administrator rights on your target server, right-click the target server in the Servers tile, and then click Manage As to provide an account that has administrator rights. The server on which you want to mount an offline VHD must be added to Server Manager, and you must have Administrator rights on that server.”
– http://technet.microsoft.com/en-us/library/hh831809.aspx
Answer is (A)
Keyword: User1 can install Windows features on VM1, not Virtual Machine features
The Answer is A only Administrators on VM can install features. If you don’t believe test it you will see.
It’s C!
Read TechNet:
Simplified authorization
The Hyper-V Administrators group is introduced and is implemented as a local security group.
What value does this change add?
This group can reduce the number of users that belong to the local Administrators group while providing users with access to Hyper-V.
What works differently?
The Hyper-V Administrators group is a new local security group. Add users to this group instead of the local Administrators group to provide them with access to Hyper-V. Members of the Hyper-V Administrators have complete and unrestricted access to all features of Hyper-V.
The question doesn’t state that the user needs access to Hyper-V features. Just to install software within the VM, it’s A.