Yournetwork contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed.
Server2 has the DHCP Server server role installed.
A user named User1 is a member of the IPAM Users group on Server1.
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2.
The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?
A.
DHCP Administrators on Server2
B.
IPAM ASM Administrators on Server1
C.
IPAMUG in Active Directory
D.
IPAM MSM Administrators on Server1
Explanation:
The user need rights to change DHCP not IPAM
C)
Members of the DHCP Administrators group can view and modify any data at the DHCP server.
http://technet.microsoft.com/en-us/library/jj878348.aspx
http://technet.microsoft.com/en-us/library/cc737716(v=ws.10).aspx
This is a wierd question. The user needs to be able to change the DHCP Scope on Server2 using IPAM.
To administer DHCP and/or DNS in IPAM, you need to have the IPAM MSM role.
So that would be answer D:.
If the user needed to be abloe to administer DHCP on server2 (not using IPAM) the answer would be A: DHCP Administrator on Server2
B is the Correct ans as we need to minimize the permissions for User1
https://technet.microsoft.com/en-us/library/jj878348.aspx
Franc is right. IPAM ASM doesn’t give permissions to manage DHCP scopes. IPAM MSM does.
https://technet.microsoft.com/en-us/library/hh831353(v=ws.11).aspx#ASM
wrong
wrong or bad question^^ (sorry)
User 1 is a member of the IPAM users group, so he can use IPAM already. He only needs to modify DHCP. So the given answer is correct. He does not need additional permissions.
You need to manage DHCP scopes using IPAM, not using DHCP Admin tools.
Answer is B. IPAM ASM Administrator allows you to manage IP blocks, ranges and IP addresses, without giving you additional administrative permissions.
Correct, IPAM ASM Administrators allows to manage IP blocks, ranges and etc., BUT User1 needs to MODIFY DHCP scopes. With ASM membership you can only create reservation on DHCP, but to modify scope-level settings such as range settings, exclusion list, DNS update settings and etc. – User1 needs MSM permission. Just tested in lab.
Answer: D
Verified in test lab.
Side Note: If your testing with an ID that has administrator rights on the IPAM server, your test results will be inaccurate, as this appears to give the user rights for all IPAM roles. Test should be performed with a standard user from non IPAM server.