Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012 R2. DC10 is currently a member of a workgroup.
You plan to promote DC10 to a read-only domain controller (RODC).
You need to ensure that a user named ContosoUser1 can promote DC10 to a RODC in the contoso.com domain.
The solution must minimize the number of permissions assigned to User1.
What should you do?
A . From Active Directory Administrative Center, pre-create an RODC computer account.
B . FromDsmgmt, run the local roles command.
C . Join DC10 to the domain. Modify the properties of the DC10 computer account.
D . Join DC10 to the domain. Run dsmod and specify the /server switch.
Answer: A
Explanation:
A staged read only domain controller (RODC) installation works in two discrete phases: