Exam MD-102 topic 1 question 43 discussion

Remote Management Users Group provides the effective rights for PS remote/remote connection. Remote Desktop Users doesn't, would also require also having local Administrator permission, not least privilege having two roles where one defined role will do. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_remote_requirements?view=powershell-7.3 User permissions - To create remote sessions and run remote commands, by default, the current user must be a member of the Administrators group on the remote computer or provide the credentials of an administrator. Otherwise, the command fails.

From: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#remote-management-users Use the Remote Management Users group to allow users to manage servers through the Server Manager console. Use the "WinRMRemoteWMIUsers\_" group to allow users to remotely run Windows PowerShell commands. As such using "Remote Management Users" group is not an option. However, to allow execution of Powershell commands, administrator privilege on the remote desktop is required. So I'm confused. I don't think it's a well thought question, I couldn't find anything that relates Powershell to Remote Desktop Users group.

D. Remote Management Users This group specifically grants users the ability to connect to the computer using PowerShell remoting. Adding Admin1 to this group will provide the necessary permissions for remote PowerShell connections without granting unnecessary privileges.

To ensure that Admin1 can establish remote PowerShell connections to the computers using the principle of least privilege, you should add Admin1 to the D. Remote Management Users group. This group is specifically designed to give users the necessary permissions to manage the computer remotely without granting them more permissions than necessary, which aligns with the principle of least privilege.

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#remote-management-users

D. Remote Management Users: This group is designed for remote management tasks and is the correct choice for our scenario. It grants the necessary permissions for PowerShell remoting without granting full administrator rights. Therefore, to ensure that Admin1 can establish remote PowerShell connections with the principle of least privilege, we should add Admin1 to the Remote Management Users group. Correct answer is D Documentation https://4sysops.com/archives/powershell-remoting-without-administrator-rights/ https://helpcenter.gsx.com/hc/en-us/articles/202447926-How-to-Configure-Windows-Remote-PowerShell-Access-for-Non-Privileged-User-Accounts

D for sure

D is correct. See Letters1234 comment..

D. Remote Management Users

D is right.

D is correct

ChatGPT tells D

D. remote management users

its about PowerShell remoting, not about RDP connections definitely D

I finally found the article proving D https://4sysops.com/archives/powershell-remoting-without-administrator-rights/

Answer is correct, it does not say less management it says least privilege.

Option: D