Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs).
An administrator named Admin1 must be able to add new WMI filters from the Group Policy
Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number
of permissions assigned to Admin1.
What should you do?
A.
From Active Directory Users and Computers, add Admin1 to the
WinRMRemoteWMIUsers__group.
B.
From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.
C.
From Active Directory Users and Computers, add Admin1 to the Domain Admins group.
D.
From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.
Explanation:
Users with Full control permissions can create and control all WMI filters in the domain, including
WMI filters created by others.
Users with Creator owner permissions can create WMI filters, but can only control WMI filters that
they create.http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx
B
Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others. Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create.
0
0
Agree…
0
0
Agree,
There is another with a slightly different (where the answer is D) as Bart indicated:
http://www.aiotestking.com/microsoft/you-need-to-delegate-the-required-permissions-to-admin1-3
make sure you check if they ask for “create new WMI filters” or “create new WMI filters and edit”
0
0
You are right.
Question clearly states “Admin1 must be able to add” no mention to edit existing GPO’s.
It also says “solution must minimize the number of permissions assigned to Admin1”.
So correct answer is
B: From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.
0
0
I also think it is B. But it is tricky. This link says that full control will give the user rights to any WMI filter. Creator Owner: Allows the user to create new WMI filters in the domain, but does not grant permissions on WMI filters created by other users.
Question states new WMI filters so I think B is answer as well
https://technet.microsoft.com/en-us/library/cc781991%28v=ws.10%29.aspx
0
0