Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server
feature installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group
on Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1?
A.
WinRMRemoteWMIUsers_
B.
IPAM MSM Administrators
C.
Remote Management Users
D.
IPAM Administrators
Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-
2012servermanagertroubleshooting-guide-part-ii-troubleshoot- manageability-status-errorsinserver- manager.aspx
Windows Server 2012 Server Manager Troubleshooting Guide, Part II: Troubleshoot Manageability
Status Errors in Server Manager Error <computer name>: Configuration refresh failed with the
following error: The metadata failed to be retrieved from the server, due to the following error:
Access is denied. The user is attempting to manage the remote server with a credential that has only
standard user (not a member of the Administrators group) access rights on the target server, and the
user has not enabled standard user remote management of the target server. By default, an account
with standard user access rights is not a part of the WinRM remote
WMI user’s group, and can perform limited management tasks on a remote server in Server
Manager. To allow standard users more management access rights on a target server, run the
Enable-ServerManagerStandardUserRemotingcmdlet on the target server, in a Windows PowerShell
session that has been opened with elevated user rights (Run as Administrator).
For more information about how to use this cmdlet (and disable standard user management access
when it is no longer needed), see the cmdlet Help topic for
nableServerManagerStandardUserRemoting
[This link is external to TechNet Wiki. It will open in a new window.]
Incorrect, answer is C. A would allow him to administer Server 2 using PowerShell.
It appears to me that correct answer is A, because :
If you are accessing the IPAM server from a remote IPAM client, you must be a member of the WinRMRemoteWMIUsers group on the IPAM server, in addition to being a member of the appropriate local IPAM security group.
https://technet.microsoft.com/en-us/library/jj878312.aspx
Answer is A. WinRMRemoteWMIUsers_ only allows connections. After that, the IPAM role groups allow access to IPAM features (or not).
Membership in Remote Management Users is used with IPAM Integration in VMM.
Correct answer is C,
Remote Management User to manage ipam with the gui
WinRMRemoteWMIUsers_ to manage ipam with power shell
Source, CBT nuggets
Yes C:
The WinRMRemoteWMIUsers_ group allows running Windows PowerShell commands remotely whereas the Remote Management Users group is generally used to allow users to manage servers by using the Server Manager console.
https://technet.microsoft.com/en-us/library/dn579255.aspx#BKMK_WinRMRemoteWMIUsers_
It’s awesome to pay a quick visit this web site and reading the views of all friends on the topic of this post, while I am also keen of getting familiarity.|