Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server
2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You need to add a new domain controller to the domain.
You install Windows Server 2012 R2 on a new server named DC3.
Which cmdlet should you run next?
A.
Add-AdPrincipalGroupMembership
B.
Install-AddsDomainController
C.
Install WindowsFeature
D.
Install AddsDomain
E.
Rename-AdObject
F.
Set-AdAccountControl
G.
Set-AdGroup
H.
Set-User
Explanation:
It is the 2nd step when installing a DC by powershell on a fresh server.
Set-ADAccountControl
The Set-ADAccountControl cmdlet modifies the user account control (UAC) values for an Active Directory user or computer account.
https://technet.microsoft.com/en-us/library/ee617249.aspx
Why not B. Install-ADDSDomainController ?
That command requires the feature to be installed:
http://syrewiczeit.com/powershell-howto-promoting-a-new-dc/
And User1 and Group1?
You first have to add the Feature:
Add-WindowsFeature AD-Domain-Services
Then promote the server:
Install-ADDSDomainController -CreateDnsDelegation:$false -DatabasePath ‘C:\Windows\NTDS’ -DomainName ‘domain.com’ -InstallDns:$true -LogPath ‘C:\Windows\NTDS’ -NoGlobalCatalog:$false -SiteName ‘Default-First-Site-Name’ -SysvolPath ‘C:\Windows\SYSVOL’ -NoRebootOnCompletion:$true -Force:$true
So the answer is C.
Adding domain services to a Server is not a feature, but a role. So Add-WindowsFeature does not apply here. The answer should be D. Install-AddsDomain for this cmdlet installs a new Active Directory domain configuration.