PrepAway - Latest Free Exam Questions & Answers

You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2

Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2
Both servers have the IP Address Management (IPAM) Server feature installed.
You have a support technician named Tech1. Tech1 isa member of the IPAM Administrators group on Server1
and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1.

PrepAway - Latest Free Exam Questions & Answers

A.
IPAM MSM Administrators

B.
IPAM Administrators

C.
winRMRemoteWMIUsers_

D.
Remote Management Users

Explanation:
Since the user is already a member of IPAM adinistrators group (and the IPAM MSM Administrators
Administrators group provides access that is already available to the IPAM Administrators group),
answer A & B => out
Then, about the debate on winRMRemoteWMIUsers VS Remote Management Users, i know they’re told to
have exactly the same permissions, but in the IPAM Microsoft documentation, they don’t talk about Remote
Management Users, not even once on 97 pages, whereas this is said about winRMRemoteWMIUsers_ :
==============
Understand and Troubleshoot IP Address Management (IPAM) in Windows Server 8 Beta
If you are accessing the IPAM server remotely usingServerManagerIPAM client RSAT, then you must
be a member of the WinRMRemoteWMIUsers group on theIPAM server, in addition to being a member of
the appropriate IPAM security group (or local Administrators group).
[…]
=========================
NB :
http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx
Windows Server 2012 – Server Manager Troubleshooting Guide, Part II: Troubleshoot Manageability
Status Errors in Server Manager
Error <computer name>: Configuration refresh failedwith the following error: The metadata failed to be
retrieved from the server, due to the following error: Access is denied.
The user is attempting to manage the remote server with a credential that has only standard user (not a
member of the Administrators group) access rights on the target server, and the user has not enabled
standard user remote management of the target server.By default, an account with standard user
access rights is not a part of the WinRM remote WMIuser’s group, and can perform limited
management tasks on a remote server in Server Manager. To allow standard users more management
access rights on a target server, run the Enable-ServerManagerStandardUserRemoting cmdlet on the target
server, in a Windows PowerShell session that has been opened with elevated user rights (Run as
Administrator). For more information about how to use this cmdlet (and disable standard user management
access when it is no longer needed), see the cmdletHelp topic for Enable-ServerManagerStandardUserRemoting [This link is external to TechNet Wiki. It will open in a new window.]

21 Comments on “You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2


Leave a Reply