What are minimum user permission for get-dhcpserverv4scope?

Question

Hello Team,

I would like to monitor DHCP Server scoped and i have a non-admin AD account. What are roles/permissions are required to allow user to run DHCP powershell cmdlets (get-dhcpserverv4scope). This user will not change anything on system. It will just monitor DHCP scopes on DHCP.

Answer 1

Hello @Rajat Singhal !

As i can see you dont need RSAT on the Remote machine you are using to control the Server

But you nee to verify that the Server is configured to accept WinRM connections.

1. Run PowerShell as an Administrator.
2. Enable PowerShell Remoting using Enable-PSRemoting -Force.
3. Configure the WinRM service to start automatically using Set-Service WinRM -StartMode Automatic.
4. Allow the server to accept connections from any IP address using Set-Item WSMan:\localhost\Client\TrustedHosts *.

Just replace * in the last command with the specific IP addresses you want to allow if you don't want to accept connections from any IP address !

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hello @Anonymous !

Welcome to Microsoft QnA!

The role you'll need to assign to the account for read-only monitoring of DHCP Server using PowerShell cmdlets is called DHCP Users. This role has the necessary permissions to view and monitor DHCP server settings without the ability to make changes.

If this user needs to remotely execute these cmdlets from their workstation, it might be necessary to have RSAT (Remote Server Administration Tools) installed on the user's machine

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards