Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs).
An administrator named Admin1 must be able to add new WMI filters from the Group Policy Management
Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number of
permissions assigned to Admin1.
What should you do?
A.
From Active Directory Users and Computers, add Admin1 to the WinRMRemoteWMIUsers__group.
B.
From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.
C.
From Active Directory Users and Computers, add Admin1 to the Domain Admins group.
D.
From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.
Explanation:
Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters
created by others.
Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they
create.
Ref: http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx
B. Delegate Admin1 Creator Owner Rights for the WMI Filters Container
Tested this on my lab.
User then can create new WMI filter but can not assign them to a gpo or change filters created by other users.
Exactly whats asked in the question.
Agree with B
Agree with B
Agree with B
Agree with B since the question just states that the admin must only be able to create new WMI filters not modify existing ones.
https://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx
Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others. Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create.
very good. you are absolutely correct. B
There is another with a slightly different (where the answer is D):
http://www.aiotestking.com/microsoft/you-need-to-delegate-the-required-permissions-to-admin1-3
Thanks for the heads-up Bart! That really helped me.
D
http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx
Incorrect.
This following excerpt is from the link that you posted.
“Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others. Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create.”
Answer is B.
B
B
Says it right here from Microsoft:
Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others.
Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create
The answer is most definitely B!! Up above Sam and Yes spell it out. The question just says “must be able to add new WMI filters”.
Not Edit so B
I am going to throw a curve ball here.
https://technet.microsoft.com/en-us/library/cc947846(v=ws.10).aspx
In that it states “To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs.”
So could it possibly be C??
D is wrong.
Keyword here is “The solution must minimize the number of permissions assigned to Admin1.”
B is correct