What are minimum user permission for get-dhcpserverv4scope?

Rajat Singhal 20 Reputation points
2023-05-25T18:56:14.2566667+00:00

Hello Team,

I would like to monitor DHCP Server scoped and i have a non-admin AD account. What are roles/permissions are required to allow user to run DHCP powershell cmdlets (get-dhcpserverv4scope). This user will not change anything on system. It will just monitor DHCP scopes on DHCP.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,127 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,021 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,364 questions
0 comments
Accepted answer
  1. Konstantinos Passadis 17,286 Reputation points
    2023-05-25T19:27:53.24+00:00

    Hello @Rajat Singhal !

    As i can see you dont need RSAT on the Remote machine you are using to control the Server

    But you nee to verify that the Server is configured to accept WinRM connections.

    1. Run PowerShell as an Administrator.
    2. Enable PowerShell Remoting using Enable-PSRemoting -Force.
    3. Configure the WinRM service to start automatically using Set-Service WinRM -StartMode Automatic.
    4. Allow the server to accept connections from any IP address using Set-Item WSMan:\localhost\Client\TrustedHosts *.

    Just replace * in the last command with the specific IP addresses you want to allow if you don't want to accept connections from any IP address !

    I hope this helps!

    Kindly mark the answer as Accepted and Upvote in case it helped!

    Regards

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Konstantinos Passadis 17,286 Reputation points
    2023-05-25T19:00:03.92+00:00

    Hello @Anonymous !

    Welcome to Microsoft QnA!

    The role you'll need to assign to the account for read-only monitoring of DHCP Server using PowerShell cmdlets is called DHCP Users. This role has the necessary permissions to view and monitor DHCP server settings without the ability to make changes.

    If this user needs to remotely execute these cmdlets from their workstation, it might be necessary to have RSAT (Remote Server Administration Tools) installed on the user's machine

    I hope this helps!

    Kindly mark the answer as Accepted and Upvote in case it helped!

    Regards