Exam AZ-800 topic 1 question 66 discussion

ChatGPT: User3 Server2\Administrators ✅ Yes (Local admin on Server2) User4 Server2\Remote Management Users ✅ Yes (Member of allowed remote group on Server2) ✅ Correct Answer: C. User3 and User4 only These two users have appropriate local rights on Server2, which is required for PowerShell remoting from Server1 to Server2.

domain\administrators and domain\remote management users are not added by default to computers

By default, PowerShell Remoting only allows connections from members of the Administrators group. However, members of the Remote Management Users group also have access to PowerShell Remoting starting from PowerShell 4.0. This group is created by default and allows users to connect remotely without requiring full administrator privileges.

User 1 and 2 are domain users, Server 2 is not domain-joined, they therefore have no permissions. It has to be C users 3 and 4 only.

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#remote-management-users Use the Remote Management Users group to allow users to manage servers through the Server Manager console. Use the WinRMRemoteWMIUsers\_ group to allow users to remotely run Windows PowerShell commands.

User1 and User1 have permission on domain controller only, no permission on server1 and server2.

To create remote sessions and run remote commands, by default, the current user must be a member of the Administrators group on the remote computer or provide the credentials of an administrator. Otherwise, the command fails. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_remote_requirements?view=powershell-7.5

User1 and User3 only, default ONLY administrators. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_remote_requirements?view=powershell-7.5#user-permissions

User1: Benutzer, die in einer Domänen-Administratoren-Gruppe sind, verfügen in der Regel über lokale Administratorrechte auf allen Domänenservern (sofern dies nicht explizit entzogen wurde). Somit kann User1 sich per PowerShell Remoting mit Server2 verbinden. User3: Als lokaler Administrator auf Server2 hat User3 standardmäßig Zugriff auf PowerShell-Remoting-Sessions zu Server2. User4: Mitglieder dieser lokalen Gruppe dürfen standardmäßig auf Server2 per PowerShell remoten. Da User4 in dieser Gruppe ist, erhält er ebenfalls Zugriff. User2: Die reine Mitgliedschaft in einer Domänen-Remote-Management-Gruppe bedeutet nicht automatisch lokale Rechte auf Server2. Da User2 nicht in der lokalen "Remote Management Users"-Gruppe von Server2 ist, erhält er keinen Zugriff.

User1 (contoso/administrators): Pode estabelecer uma sessão remota, pois é membro do grupo Administrators no domínio contoso. User2 (contoso/Remote Management Users): Pode estabelecer uma sessão remota, pois é membro do grupo Remote Management Users no domínio contoso. User3 (Server2/administrators): Pode estabelecer uma sessão remota, pois é membro do grupo Administrators no Server2. User4 (Server2/Remote Management Users): Pode estabelecer uma sessão remota, pois é membro do grupo Remote Management Users no Server2.

E User1 (contoso/administrators): Pode estabelecer uma sessão remota, pois é membro do grupo Administrators no domínio contoso. User2 (contoso/Remote Management Users): Pode estabelecer uma sessão remota, pois é membro do grupo Remote Management Users no domínio contoso. User3 (Server2/administrators): Pode estabelecer uma sessão remota, pois é membro do grupo Administrators no Server2. User4 (Server2/Remote Management Users): Pode estabelecer uma sessão remota, pois é membro do grupo Remote Management Users no Server2.

By default, members of the Administrators group and the Remote Management Users group can initiate PowerShell remoting sessions

Change that. A because contoso admins would have the same rights. so both admins could remote in.

C. From google ai: User Permissions: By default, only members of the Administrators group on the remote computer have permission to use PowerShell remoting. However, you can configure it to allow non-administrative users by granting them Execute permissions to the appropriate session configurations.

D is correct

D right?

Answer is A. user 1 and 3 since they have the administrator right