which group on SERVER2 should you add Tech1?

Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named SERVER1 and SERVER2 both servers have the IP Address
Management (IPAM) Server feature installed.
You have a support technician named Tech1.
Tech1 is a member of the IPAM Administrators group on SERVER1 and SERVER2.
You need to ensure that Tech1 can use Server Manager on SERVER1 to manage IPAM on SERVER2.
To which group on SERVER2 should you add Tech1?

Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named SERVER1 and SERVER2 both servers have the IP Address
Management (IPAM) Server feature installed.
You have a support technician named Tech1.
Tech1 is a member of the IPAM Administrators group on SERVER1 and SERVER2.
You need to ensure that Tech1 can use Server Manager on SERVER1 to manage IPAM on SERVER2.
To which group on SERVER2 should you add Tech1?

A.
IPAM MSM Administrators

B.
IPAM Administrators

C.
WinRMRemoteWMIUsers__

D.
Remote Management Users

Explanation:
http://www.google.co.za/url?
sa=t&rct=j&q=winrmremotewmiusers_&source=web&cd=2&cad=rja&ved=0CDkQFjAB&url=http%3A%2F%
2Fdownload.microsoft.com%2Fdownload%2FF%2F6%2F9%2FF69BE7E8-3E99-4A4A-B189-8AFADABC6216%2FUnderstand%2520and%2520Troubleshoot%2520IP%2520Address%2520Management%
2520(IPAM)%2520in%2520Windows%2520Server%25208%2520Beta.
docx&ei=3OY9Ue3CFs6yhAeg04CgBg&usg=AFQjCNGh5tHzxwcaU9vXDGmPUgtjfPvhnw
If you are accessing the IPAM server remotely usingServer Manager IPAM client RSAT, then you must be a
member of the WinRMRemoteWMIUsers group on the IPAMserver.
In addition to being a member of the appropriate IPAM security group (or local Administrators group).
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This is another case of Remote Management Users andwinRMRemoteWMIUsers_ providing the exact same
permissions.
The description of each group is exactly the same. However since the user is already a member of IPAM
adinistrators group and the IPAM MSM AdministratorsAdministrators group provides access that is already
available to the IPAM Administrators group.



Leave a Reply 4

Your email address will not be published. Required fields are marked *


Lostineurope

Lostineurope

C is the Correct Answer.

If you are Accessing the IPAM server from a Remote IPAM client, you Must Be a Member of the WinRMRemoteWMIUsers Group on the (Remote) IPAM server, in addition to being a Member of the appropriate Local IPAM Security Group.

https://technet.microsoft.com/en-us/library/jj878312.aspx

Mnoble

Mnoble

Thanks for the MS Link. It’s printed and in the 70-412 3 ring binder 🙂

James L

James L

This is a tricky question

The WinRMRemoteWMIUsers_ group allows running Windows PowerShell commands remotely whereas the Remote Management Users group is generally used to allow users to manage servers by using the Server Manager console.
https://technet.microsoft.com/en-us/library/dn579255.aspx#BKMK_WinRMRemoteWMIUsers_

As the question says that you need to ensure that Tech1 can use Server Manager to manage IPAM on Server2

My suggestion would be that MS are looking to see if you are aware of the above statement

So I would go for D