Your network contains an Active Directory domain named contoso.com. The domain contains a read-only
domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins withthe ability to manage the hardware and the software
on RODC1. The solution must not provide RODC_Adminswith the ability to manage Active Directory objects.
What should you do?
A.
From a command prompt, run the dsmgmt local rolescommand.
B.
From Windows PowerShell, run the Set-ADAccountControlcmdlet.
C.
From Active Directory Users and Computers, configure the Member Of settings of the RODC1
account.
D.
From Active Directory Sites and Services, run theDelegation of Control Wizard.
Explanation:
http://technet.microsoft.com/en-us/library/cc732473.aspx