which group on Server2 should you add Tech1?

Your network contains an Active Directory domain named contoso.com. The domain
contains two servers named Server1 and Server2. Both servers have the IP Address
Management (IPAM) Server feature installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM
Administrators group on Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on
Server2.
To which group on Server2 should you add Tech1?

Your network contains an Active Directory domain named contoso.com. The domain
contains two servers named Server1 and Server2. Both servers have the IP Address
Management (IPAM) Server feature installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM
Administrators group on Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on
Server2.
To which group on Server2 should you add Tech1?

A.
WinRMRemoteWMIUsers_

B.
IPAM MSM Administrators

C.
Remote Management Users

D.
IPAM Administrators

Explanation:
A) IPAM MSM Administrators can’t access remotely
B) IPAM Administrators can’t access remotely
C) If you are accessing the IPAM server remotely using Server Manager IPAM client RSAT,
then you must be a member of the WinRMRemoteWMIUsers group on the IPAM server, in
addition to being a member of the appropriate IPAM security group (or local Administrators group).
http://msdn.microsoft.com/en-us/library/windows/desktop/aa384295(v=vs.85).aspx
http://www.microsoft.com/en-us/download/details.aspx?id=29012



Leave a Reply 18

Your email address will not be published. Required fields are marked *


mina

mina

I think its A, WinRMRemoteUsers

KK

KK

I agree. should be A, WinRMRemoteWMIUsers

Dean

Dean

Not sure about this one as Mictosofts documentation says differently – https://technet.microsoft.com/en-us/library/dn579255.aspx#BKMK_WinRMRemoteWMIUsers_

The WinRMRemoteWMIUsers_ group allows running Windows PowerShell commands remotely whereas the Remote Management Users group is generally used to allow users to manage servers by using the Server Manager console.

The question does ask to be able to manage IPAM from server manager, going to test it in my lab but I think its Remote Management Users (at the moment)

noname

noname

I agree with Dean, Remote management users

Answer is C

noname

noname

I agree with Dean, Remote management users

Answer is C

evdm

evdm

WimRMRemoteWMIUsers_

good link:
https://technet.microsoft.com/en-us/library/jj878312.aspx

18. If you are accessing the IPAM server from a remote IPAM client, you must be a member of the WinRMRemoteWMIUsers group on the IPAM server, in addition to being a member of the appropriate local IPAM security group.

Tim

Tim

I actually tested this out, I believe both A and C are correct however A is most correct, as I seemed to be able to do basic management (really didn’t try a lot) with either group however since https://technet.microsoft.com/en-us/library/jj878312.aspx specifically states WinRMRemoteWMIUsers I believe this to be the more correct answer as Remote Management Users would give Tech1 access to any other Roles and Features that Server2 has.

Ex

Ex

I would say A is correct answer.

According to https://technet.microsoft.com/en-us/library/jj878312.aspx :
If you are accessing the IPAM server from a remote IPAM client, you must be a member of the WinRMRemoteWMIUsers group on
#the IPAM server, in addition to being a member of the appropriate local IPAM security group.

Saleh

Saleh

the correct answer is A

Mel

Mel

“You must ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.” Can you use Powershell via Server Manager? If not then don’t need WinRMRemoteWMIUsers membership. It states “use Server Manager”.

Mel

Mel

“ensure that Tech1 can use Server Manager on Server1 to manage IPAM on
Server2″…so Server1 is server and Serveer2 is client…so managing a client from a server…so WinRMRemoteWMIUsers not necessary. Only necessaru if trying to manage the server from the client.

Nedim

Nedim

The answer must be C. Even on CBT nuggets teacher point to these two options. Remote Management User group is for Server manager and WinRMRemoteWMIUsers_ is for Powershell. So the answer must be C.

Geezer32

Geezer32

SO, there are two different TechNet articles that contradict each other regarding WinRMRemoteWMIUsers_ (gasp that never happens..)

One says that WinRMRemoteWMIUsers_ is for running remote powershell, however the other is from an IPAM deployment guide which explicitly states that you need to be a member of WinRMRemoteWMIUsers_ so I would go with that. – Until you come across the other article that also says you need to be a member of “Remote Management” group to manage servers with Server Manager, so WTFK.

toni

toni

Hello:

Remember that IPAM client is not a separate client, but a Server Manager Module. So, according to https://technet.microsoft.com/en-us/library/jj878312.aspx : If you are accessing the IPAM server from a remote IPAM client, you must be a member of the WinRMRemoteWMIUsers group on the IPAM server (same that Server Manager), in addition to being a member of the appropriate local IPAM security group.

Answer is A.