You need to delegate the required permissions to Admin1

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.
An administrator named Admin1 must be able to create new WMI filters and edit all of the existing
WMI filters from the Group Policy Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number
of permissions assigned to Admin1.
What should you do?

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.
An administrator named Admin1 must be able to create new WMI filters and edit all of the existing
WMI filters from the Group Policy Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number
of permissions assigned to Admin1.
What should you do?

A.
From Active Directory Users and Computers, add Admin1 to the
WinRMRemoteWMIUsers__group.

B.
From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.

C.
From Active Directory Users and Computers, add Admin1 to the Domain Admins group.

D.
From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.

Explanation:
Users with Full control permissions can create and control all WMI filters in the domain, including
WMI filters created by others.
Users with Creator owner permissions can create WMI filters, but can only control WMI filters that
they create.
Ref: http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx



Leave a Reply 2

Your email address will not be published. Required fields are marked *

4 × 1 =


Luis

Luis

in this case the correct anwer is D, because admin1 needs to create new filter and edit filters created by others, in the case of the other link mentioned above by Bart the answer is B, because in the case admin1 only needs to create new filters