Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1
and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1?
A.
WinRMRemoteWMIUsers_
B.
IPAM MSM Administrators
C.
Remote Management Users
D.
IPAM Administrators
Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-
2012servermanagertroubleshooting-guide-part-ii-troubleshoot- manageability-status-errors-inservermanager.aspx
Windows Server 2012 Server Manager Troubleshooting Guide, Part II: Troubleshoot Manageability Status
Errors in Server Manager Error <computer name>: Configuration refresh failed with the following error: The
metadata failed to be retrieved from the server, due to the following error: Access is denied. The user is
attempting to manage the remote server with a credential that has only standard user (not a member of the
Administrators group) access rights on the target server, and the user has not enabled standard user remote
management of the target server. By default, an account with standard user access rights is not a part of the
WinRM remote
WMI user’s group, and can perform limited management tasks on a remote server in Server Manager. To allow
standard users more management access rights on a target server, run the EnableServerManagerStandardUserRemotingcmdlet on the target server, in a Windows PowerShell session that has
been opened with elevated user rights (Run as Administrator).
For more information about how to use this cmdlet (and disable standard user management access when it is
no longer needed), see the cmdlet Help topic for nableServerManagerStandardUserRemoting[This link is external to TechNet Wiki. It will open in a new window.]
“If you are accessing the IPAM server from a remote IPAM client, you must be a member of the WinRMRemoteWMIUsers group on the IPAM server, in addition to being a member of the appropriate local IPAM security group”