Your network contains an Active Directory domain named adatum.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2.
On a server named Core1, you perform a Server Core Installation of Windows Server 2012 R2. You
join Core1 to the adatum.com domain.
You need to ensure that you can use Event Viewer on Server1 to view the event logs on Core1.
What should you do on Core1?
A.
Run the Disable NetFirewallRule cmdlet.
B.
Install Remote Server Administration Tools (RSAT).
C.
Install Windows Management Framework.
D.
Run the Enable-Com + Network Access Firewall Rule.
Explanation:
Information regarding IPsec policy changes, etc. can be found in the Event Viewer. Thus you need to
enable the NetFirewallRule command. This will allow you to view the event logs.
NOT SURE WHY IT IS NOT AN ANSWER BUT IT SHOULD BE Run the Enable NetFirewallRule cmdlet.
Multiple blogs support this answer such as the following;
http://mcsa-70-410.blogspot.com/2013/07/practice-questions-for-70-410.html
http://www.mcseanswers.com/latest-mcse-70-467-real-exam-download-31-40.html
0
0
Answer D is partially correct, but it’s not enough!
By enabling only COM+ Network Access rule on remote server you will be able to connect (manage) using Computer Management snap-in, but to view Event logs you should also enable Remote Event Log Management rules.
In the book “Zacker C. – Exam Ref 70-410 Installing and Configuring Windows Server 2012 R2 – 2014” on page 116 we read…
CONFIGURING WINDOWS FIREWALL
If you attempt to launch MMC snap-ins targeting a remote server, such as the Computer
Management console, you will receive an error because of the default Windows Firewall
settings in Windows Server 2012 R2. MMC uses the Distributed Component Object Model
(DCOM) for remote management instead of WinRM, and these settings are not enabled by
default.
To address this problem, you must enable the following inbound Windows Firewall rules
on the remote server you want to manage:
– COM+ Network Access (DCOM-In)
– Remote Event Log Management (NP-In)
– Remote Event Log Management (RPC)
– Remote Event Log Management (RPC-EPMAP)
To modify the firewall rules on the remote system, you can use any one of the following
methods:
Open the Windows Firewall with Advanced Security MMC snap-in on the remote
server (if it is a Full GUI installation).
– Use the NetSecurity module in Windows PowerShell.
– Create a GPO containing the appropriate settings and apply it to the remote server.
– Run the Netsh AdvFirewall command from an administrative command prompt.
NOTE: USING WINDOWS POWERSHELL
To configure the Windows Firewall rules required for remote server management using
DCOM on a Server Core installation, you can use the following Windows PowerShell syntax:
Set-NetFirewallRule –name –enabled True
To obtain the Windows PowerShell names for the preconfigured rules in Windows Firewall,
use the Get-NetFirewallRule command. The resulting commands to enable the four rules
listed earlier are as follows:
Set-NetFirewallRule –name ComPlusNetworkAccess-DCOM-In –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-In-TCP –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-NP-In-TCP –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-RPCSS-In-TCP –enabled True
OR…
as sayed in
https://technet.microsoft.com/en-us/library/jj574205.aspx?f=255&MSPPError=-2147217396#BKMK_1.4
To configure Windows Firewall to allow MMC snap-in(s) to connect
To allow all MMC snap-ins to connect, run
Enable-NetFirewallRule -DisplayGroup “Remote Administration”
To allow only specific MMC snap-ins to connect, run:
Enable-NetFirewallRule -DisplayGroup “”
Where:
Rulegroup is one of the values from the table below, depending on which snap-in you want to connect.
MMC snap-in – Rule group
========================
Event Viewer – Remote Event Log Management
Services – Remote Service Management
Shared Folders – File and Printer Sharing
Task Scheduler – Performance Logs and Alerts, File and Printer Sharing
Disk Management – Remote Volume Management
Windows Firewall with Advanced Security – Windows Firewall Remote Management
so the correct answer should be OR Enable NetFirewallRule cmdlet (overall) EITHER Enable COM+ Network Access and Remote Event Log Management rules
0
0
In my test, from PS is need only Set-NetFirewallRule –name RemoteEventLogSvc-In-TCP –enabled True.
With this command i can open the event viewer remotely.
The ComPlusNetworkAccess-DCOM-In instead IS NOT FOUND
0
0
A
0
0
My conclusion after testing in my home lab is that MCSE Guy is along the right idea
The answers should include enabling the NetFireWall rule. None of the given answers seem to make sense or work
With this command run on the core server I can access the Event Viewer remotely
Set-NetFirewallRule -DisplayGroup ‘Remote Event Log Management’ -Enabled true
With this command run I get the error “No objects found with the Property DisplayGroup equal to “COM+ Network Access” and cannot access the Event Viewer remotely
Set-NetFirewallRule -DisplayGroup ‘COM+ Network Access’ -Enabled true
0
0
An impressive share! I’ve just forwarded this onto a colleague who was doing a little research on this. And he in fact ordered me dinner because I stumbled upon it for him… lol. So let me reword this…. Thanks for the meal!! But yeah, thanx for spending the time to talk about this subject here on your website.|
0
0
}
0
0
Great post. I was checking continuously this weblog and I’m inspired! Extremely useful info specially the ultimate part 🙂 I deal with such information a lot. I was looking for this certain info for a long time. Thanks and best of luck. |
0
0
I do not know if it’s just me or if perhaps everybody else encountering problems with your blog. It appears as though some of the written text within your posts are running off the screen. Can somebody else please provide feedback and let me know if this is happening to them as well? This could be a problem with my web browser because I’ve had this happen before. Many thanks|
0
0