Pytanie 66
Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012 R2.
DC10 is currently a member of a workgroup.
You plan to promote DC10 to a read-only domain controller (RODC).
You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the contoso.com
domain. The solution must minimize the number of permissions assigned to User1.
What should you do?
Join DC10 to the domain. Run dsmod and specify the /server switch
From Active Directory Users and Computers, run the Delegation of Control Wizard on the contoso.com domain object
From Active Directory Administrative Center, pre-create an RODC computer account
rom Ntdsutil, run the local roles command