Your network contains an Active Directory domain named contoso.com.
The domain contains five domain controllers.
You have a branch office that has a local support technician named Tech1.
Tech1 installs Windows Server 2016 on a server named RODC1 in a workgroup.
You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain.
Which three actions should you perform? Each correct answer presents part of the solution.
A.
Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard.
B.
Create an RODC computer account by using Active Administrative Center.
C.
Instruct Tech1 to run dcpromo.exe on RODC1.
D.
Instruct Tech1 to install the Active Directory Domain Services server role on RODC1.
E.
Modify the permissions of the Domain Controllers organizational unit (OU).
Should be A B C!
http://www.informit.com/articles/article.aspx?p=1346012&seqNum=5
1
11
dcpromo will cover D.
2
5
A,B,D
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-active-directory-read-only-domain-controller–rodc—level-200-
23
0
Agree.
And right order is B,D,A
10
0
I agree with A B D.
First, pre-stage a computer-account for the RODC. This is needed because a local support technician is unlikely to have the permission to create a computer-account in the domain. This can be done using ADAC. Hence, B.
Next, you’ll need a non-domain-joined system. It states that Tech1 has installed Windows Server 2016, but it states nothing about the roles. So we can safely assume we need the AD-DS role installed. Which is D.
Finally, as soon as the role is installed, Server Manager will prompt Tech1 that it needs more configuration to install AD-DS. Which will start the AD promotion. Provided the computer name is identical to the one we made in B, the wizard will prompt Tech1 that a computer account was found. It will also set the correct checkboxes (like Global Catalog) that we checked when pre-staging. After that, it’s Next, Next, Finish.
This would be A.
10
0
I totally agree.
http://www.rebeladmin.com/2014/10/step-by-step-guide-to-install-read-only-domain-controller-rodc/
The answer C is incorrect because the dcpromo is deprecated in windows server 2016, now there is powershel(install-addsdomaincontroller, etc)
2
0