Your network contains an Active Directory domain named contoso.com. The domain contains a read-only
domain controller (RODC) named RODC1. You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins withthe ability to manage the hardware and the software
on RODC1. The solution must not provide RODC_Adminswith the ability to manage Active Directory objects.
What should you do?
A.
From Active Directory Users and Computers , configure the Managed By settings of the RODC1 account.
B.
From Active Directory Sites and Services, run theDelegation of Control Wizard
C.
From Active Directory Users and Computers, run the Delegation of Control Wizard.
D.
From a command prompt, run the dsadd computer command.
http://technet.microsoft.com/en-us/library/cc755310(v=ws.10).aspx
“When you delegate the ability to log on to an RODC to a user or a security group, the user or group is not added the Domain Admins group and therefore does not have additional rights to perform directory service operations.”
I think C.
0
0
I think you are correct researcher. Key phrase is “and hardware”
However, the user or group can perform local administration of the server, including any tasks that can be performed by a member of the Administrators group on a member server. For example, a delegated RODC administrator can do the following on the RODC:
• Install hardware devices, such as network adapters and disk drives
0
0
Ah, I kept reading. You are wrong Researcher it is “A”
To specify the delegated RODC administrator after installation, you can use either of the following options:
• Modify the Managed By tab of the RODC account properties in the Active Directory Users and Computers snap-in
So you do the managed by for delegation
0
0
Answer A in this case:
http://technet.microsoft.com/de-de/library/cc755310(v=ws.10).aspx
>>>
Modify the Managed By tab of the RODC account properties in the Active Directory Users and Computers snap-in, as shown in the following figure. (…) This is the recommended way to specify the delegated RODC administrator account because the information is stored in AD DS, where it can be centrally managed by domain administrators.
<<<
0
0