You need to delegate the required permissions to Admin1

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.
An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI
filters from the Group Policy Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number of
permissions assigned to Admin1.
What should you do?

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.
An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI
filters from the Group Policy Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number of
permissions assigned to Admin1.
What should you do?

A.
From Active Directory Users and Computers, add Admin1 to the WinRMRemoteWMIUsers__group.

B.
From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.

C.
From Active Directory Users and Computers, add Admin1 to the Domain Admins group.

D.
From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.

Explanation:
Users with Full control permissions can create and control all WMI filters in the domain, including WMI
filters created by others.
Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they
create.
Ref: http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx



Leave a Reply 3

Your email address will not be published. Required fields are marked *

three × four =


hater

hater

really dont know what is the right answer…some says D and the other one B..

Christiaan Brinkhoff

Christiaan Brinkhoff

Hi! All! Merry X’mas!!!

Passed 70-417 exam last week! Maybe the best gift for my Christmas!! haha~~~

Score of my 70-417 test:
70-410 : 900 (total 20q in this section)
70-411 : 890 (total 20q in this section)
70-412 : 885 (total 18q in this section)

Only few new questions in the whole 70-417 test, and they were mainly appeared in the ADFS section of 70-412.

And, pay attention to these Qs:

1. Question about exporting printers from a 2008 R2 to a 2012 R2
2. Question about which command you need to transfer the global catalog/schema role
3. Question about how to change the UPN suffix on all user accounts in a domain
4. Question about the IPAM method to switch from auto to manual install

The valid 70-417 dumps that I learned:

http://www.passleader.com/70-417.html

(611q VCE and PDF)

All new questions were from it, and wrong answers have been corrected, the most valid 70-417 dumps until now!