Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Remote Access server role installed.
You log on to Server1 by using a user account named User2.
From the Remote Access Management Console, you run the Getting Started Wizard and
you receive a warning message as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can configure DirectAccess successfully. The solution must
minimize the number of permissions assigned to User2.
To which group should you add User2?
A.
Enterprise Admins
B.
Administrators
C.
Account Operators
D.
Server Operators
Explanation:
You must have privileges to create WMI filters in the domain in which you want to create the
filter. Permissions can be changed by adding a user to the Administrators group.
Administrators (A built-in group)
After the initial installation of the operating system, the only member of the group is the
Administrator account. When a computer joins a domain, the Domain Admins group is added
to the Administrators group. When a server becomes a domain controller, the EnterpriseAdmins group also is added to the Administrators group. The Administrators group has builtin capabilities that give its members full control over the system. The group is the default
owner of any object that is created by a member of the group.
This example logs in as a test user who is not a domain user or an administrator on the
server. This results in the error specifying that DA can only be configured by a user with local
administrator permissions.
Ref: http://technet.microsoft.com/en-us/library/cc780416(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc775497(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx
0
0
Should it be A? I am assuming “Administrators” is not Domain Administrators, and if so, only Enterprise Admins gives the necessary privileges.
https://technet.microsoft.com/en-us/library/cc770562.aspx
0
0
Shouldn’t*
0
0
Yes, but to perform the required task the minimum user permission is local Administrator which is part of local Administrators Group (BUITIN), when a server is joined to a domain the Domain Administrators Group is putted into the Local Administrators Group. So the answer is Always B either is Administrator, Administrators or Domain Admins.
0
0
I just got this question today on the 711 and option B was “Domain Admins” on my test
0
0
I also got this question on 8/25/15. Answer B Administrators was not in the selection. It was replaced by Domain Admin. I put Domain Admin but I’m not sure if it’s correct
0
0
I just got this question today on the 70-411 and option B was “Domain Admins” on my test
0
0
B
0
0
Just desire to say your article is as amazing. The clarity in your put up is simply excellent and i could assume you’re a professional in this subject. Well together with your permission allow me to grab your RSS feed to stay updated with coming near near post. Thanks a million and please keep up the enjoyable work.
http://www.xiaochoudaoju.com/comment/html/index.php?page=1&id=21505
0
0