求70-412一题答案

tomyxd

QUESTION 122
Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2 Both servers have the IP Address Management (IPAM) Server feature
installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on
Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1?

A. IPAM MSM Administrators
B. IPAM Administrators
C. winRMRemoteWMIUsers_
D. Remote Management Users


有的题库选择D ，有的选择C。。 究竟是哪个  求大神 讲解。。另 一下是  题库的  分析 各有各的道理 算是 看晕了。。


选择c的解释：
If you are accessing the IPAM server remotely using Server Manager IPAM client RSAT, then you must be
a member of the WinRMRemoteWMIUsers group on the IPAM server, in addition to being a member of the
appropriate IPAM security group (or local Administrators group).
http://msdn.microsoft.com/en-us/library/windows/desktop/aa384295(v=vs.85).aspx
http://www.microsoft.com/en-us/download/details.aspx?id=29012


选择D：的解释：
Explanation/Reference:
Tricky Question this one
Documentation says that you should add to the WinRMRemoteWMIUsers_ group but this answer here is
not 100% gramatically correct. In order to use Server Manager on a Server the user must be a member of
Remote Management Users as a minimum

guojin1314

D吧Remote Management Users
此组的成员可以通过管理协议(例如，通过 Windows 远程管理服务实现的 WS-Management)访问 WMI 资源。

WinRMRemoteWMIUsers__
Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.

tomyxd

guojin1314 发表于 2014-11-13 14:40
D吧Remote Management Users
此组的成员可以通过管理协议(例如，通过 Windows 远程管理服务实现的 WS-Mana ...

我在微软查到这个 o(︶︿︶)o 唉 看晕了。。
http://msdn.microsoft.com/zh-cn/library/aa384372.aspx


WMI Plug-in Configuration Notes
Beginning with Windows 8 and Windows Server 2012, WMI plug-ins have their own security configurations. For a normal or power (non-administrator) user to be able to use the WMI plug-in, you need to enable access for that user after the listener has been configured. First, you must set up the user for remote access to WMI through one of these steps:
run lusrmgr.msc to add the user to the WinRMRemoteWMIUsers__ group in the Local Users and Groups window, or
use the winrm command-line tool to configure the security descriptor for the namespace of the WMI plug-in, as follows: winrm configSDDL http://schemas.microsoft.com/wbem/wsman/1/wmi/WmiNamespace.
When the user interface appears, add the user.