You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on R0DC1