Your network contains a single Active Directory named contoso.com. System Center 2012 R2
Configuration Manager Service Pack 1 (SP1) is deployed to contoso.com.
The computer accounts of all the client computers are in an organizational unit (OU) maned Clients. A Group Policy is configured to add a group named Client Admins to the Administrators group on each client computer.
You create a domain user named User1.
The domain users are members of the local groups on each client computer as described in the following table.

You plan to configure client push installation.
You need to configure the client push installation account. The solution must use the principle of least privilege.
What should you do?
Show answer and explanation
Correct answer: B
You must have the following security permissions to install the Configuration Manager client by using client push: To configure the Client Push Installation account: Modify and Readpermission for the Site object.
To use client push to install the client to collections, devices and queries: Modify Resource and Read permission for the Collection object.
Note: By default, members of the Power Users group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones.



