Microsoft Endpoint Administrator — Question 22

Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10.
You enable Windows PowerShell remoting on the computers.
You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege.
To which group should you add Admin1?

Answer options

• A. Access Control Assistance Operators
• B. Remote Desktop Users
• C. Power Users
• D. Remote Management Users

Correct answer: D

Explanation

The correct answer is D, Remote Management Users, as this group is specifically designed to allow users to manage Windows computers remotely using PowerShell. The other options, such as Remote Desktop Users and Power Users, do not grant the necessary permissions for PowerShell remoting, thus not adhering to the principle of least privilege.