MDFT Academy has an on-premises network that contains an Active Directory domain named mdft.academy. The domain contains two computers named WORKSTATION01 and WORKSTATION02 that run Windows 10. On WORKSTATION01, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on WORKSTATION02.
What should you do first?
Choose the correct answer from the options below.
Please select at least one answer!
Correct!
I'm sorry, your answer is not correct.
Explanations for each answer:
On WORKSTATION02, run the Enable-PSRemoting cmdlet is correct.
On WORKSTATION02, add WORKSTATION01 to the Remote Management Users group is incorrect. The Remote Management Users group controls which user accounts (not computer accounts) are allowed to connect via PowerShell remoting when they are not local administrators. This step is only required if the user initiating the remote session is not an administrator on WORKSTATION02. Usually, the user has admin rights and this step is unnecessary.
From Active Directory, configure the Trusted for Delegation setting for the computer account of WORKSTATION02 is incorrect. Trusted for Delegation is used for Kerberos-based multi-hop authentication, allowing a service to impersonate users to access resources on another computer. This is not needed for a basic one-to-one PowerShell remoting session.
On WORKSTATION01, run the New-PSSession cmdlet is incorrect. New-PSSession can create a persistent remote PowerShell session, but it requires PowerShell remoting to already be enabled and properly configured on the target computer (WORKSTATION02). Without running Enable-PSRemoting first, this command will fail.
Learn more about enabling PowerShell remoting with the Enable-PSRemoting cmdlet: