Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012. In a remote site, a support technicianinstalls a server named DC10 that runs Windows Server
2012. DC10 is currently a member of a workgroup. You plan to promote DC10 to a read-only domain controller
(RODC). You need to ensure that a user named Contoso/User1 can promote DC10 to a RODC in the
contoso.com domain. The solution must minimize the number of permissions assigned to User1. What should
you do?

A.
Join DC10 to the domain. Modify the properties ofthe DC10 computer account

B.
From Active Directory Administrative Center, pre-create an RODC computer account.

C.
Join DC10 to the domain. Run dsmod and specify the /server switch

D.
From Active Directory Administrative Center, modify the security settings of the Domain Controllers
organizational unit (OU).