Your network contains two servers named Server1 and Server2 that run Windows Server
2012 R2.Server1 and Server2 are part of a workgroup.
On Server1 and Server2, you create a local user account named Admin1.You add the
account to the local Administrators group. On both servers, Admin1 has the same password.
You log on to Server1 as Admin1.You open Computer Management and vol.connect to
Server2.
When you attempt to create a scheduled task, view the event logs, and manage the shared
folders, you receive Access Denied messages.
You need to ensure that you can administer Server2 remotely from Server1 by using
Computer Management.
What should you configure on Server2?
A.
From Server Manager, modify the Remote Management setting.
B.
From Local Users and Groups, modify the membership of the Remote Management
Users group.
C.
From Windows Firewall, modify the Windows Management Instrumentation (WMI) firewall
rule.
D.
From Registry Editor, configure the LocalAccountTokenFilterPolicy registry value.
I’m shocked. Is this a 70410 test question?
Ref: http://aaron-kelley.net/blog/2010/01/disable-remote-uac-in-windows-vista-and-windows-7/
0
0
Manuel, I feel the same.
0
0
How is this related to what we studied? I believe this is for 70-412, did anyone get this q for 70-410?
0
0
solution here https://technet.microsoft.com/en-us/library/hh831453.aspx
0
0
This question was added for the updated R2 content. Answer is correct
0
0
Can anyone explain why it’s “D” as I’m not 100% sure on the reason why that’s the correct answer.
John.
0
0
https://technet.microsoft.com/en-us/library/hh831453.aspx
“To override UAC restrictions on running elevated processes on workgroup computers, create a registry entry called LocalAccountTokenFilterPolicy on the workgroup server by running the following cmdlet.”
0
0
Note the question is asking about running scheduled tasks and other tasks remotely, not just using server manager.
Running scheduled tasks on workgroup servers will trigger UAC issues
0
0
Yeah I just did the Official Microsoft course in the UK and there was nothing near this on the course. I’ve done some research and users have reported this question has been seen on the 410 exam.
I personally think if Microsoft are going to be such dicks with their exams they should set up their own exam centres and stop charging people £100 each time.
0
0
The solution link provided in the earlier comment doesn’t refer to the answer. I believe ‘Server Manager’ and ‘Computer Management’ is different. To check the event logs for remote computer you need to go to computer management > right click the node > connect another computer > provide IP / hostname > enter creds.
For domain doen’t need creds if logged in currently as domain / enterprise admin.
For workgroup not sure. It should be option B
0
0
By practice >>>>
1. enable the following inbound Windows Firewall rules :
▪ COM+ Network Access (DCOM-In)
▪ Remote Event Log Management (NP-In)
▪ Remote Event Log Management (RPC)
▪ Remote Event Log Management (RPC-EPMAP)
2. PowerShell :
New-ItemProperty -Name LocalAccountTokenFilterPolicy -path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -propertyType DWord -value 1
1
1