Your company has a main office and a branch office. You plan to deploy a Readonly Domain Controller (RODC) in the branch office.
You need to plan a strategy to manage the RODC. Your plan must meet the following requirements:
– Allow branch office support technicians to maintain drivers and disks on the RODC
– Prevent branch office support technicians from managing domain user accounts
What should you include in your plan?
A.
Configure the RODC for Administrator Role Separation.
B.
Configure the RODC to replicate the password for the branch office support technicians.
C.
Set NTFS permissions on the Active Directory database to Read & Execute for the branch office support technicians.
D.
Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office support technicians.
Explanation:
http://technet.microsoft.com/en-us/library/cc753170%28WS.10%29.aspx