Exam AZ-800 topic 2 question 30 discussion

1. Yes User1 is in: Contoso\Administrators Domain admins are local admins on all domain-joined machines, including Server2. Yes — User1 has admin rights and can remotely access Server2 via PowerShell. 2. No User2 is in: Contoso\Remote Management Users This group does not have admin privileges by default, nor is it granted access to Domain Controllers unless explicitly configured. Also, Enable-PSRemoting was run on Server2, not DC1 — so WinRM is not enabled on DC1. No — Because: Remote Management Users alone isn't enough to access a Domain Controller remotely. PSRemoting not enabled on DC1. 3. No User3 is in: Server2\Power Users Power Users do not have remoting rights by default. Also, since User3 is not in Administrators or Remote Management Users, this won't work unless explicitly configured. No — User3 cannot initiate a PowerShell session to Server2.

No No No By default, remoting requires admin access on the target computer. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_remote_requirements The only account with admin access is User1, but it's not member of the Domain Admins group, only of the built-in Administrators group of the domain, that has admin access on the Domain Controllers only. The only working scenario would be User1 remoting to DC1.

I think is Y N N

YNN User1 can establish a PowerShell remoting session from Server1 to Server2. **Yes. User1 is a member of the Contoso\Administrators group, which typically has the necessary permissions to establish a PowerShell remoting session. User2 can establish a PowerShell remoting session from Server2 to DC1. **No. User2 is a member of the Contoso\Remote Management Users group, which allows remote management but does not necessarily grant permissions to connect to a domain controller unless explicitly configured. User3 can establish a PowerShell remoting session from Server1 to Server2. **No. User3 is a member of the Server2\Power Users group, which grants elevated privileges on Server2 but does not inherently provide permissions to establish a remote session from another server.

Remote Management users is a built-in local group. Needs to be granted on server2 itself. So YNN by default- only domain admins who are part of the built-in local administrators.

YNN. The Enable-PSRemoting command is a PowerShell cmdlet that configures the local computer to receive Windows PowerShell remote commands. This is essential for enabling PowerShell remoting, which allows you to run PowerShell commands and scripts on remote computers. Power users do not have permissions to logon remotely

Answer is Yes No No

Correct answer