Your network contains an Active Directory domain named contoso.com. The domain
contains a read-only domain controller (RODC) named R0DC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware
and the software on R0DC1. The solution must not provide RODC_Admins with the ability to
manage Active Directory objects.
What should you do?

A.
From Active Directory Sites and Services, run the Delegation of Control Wizard.

B.
From a command prompt, run the dsadd computer command.

C.
From Active Directory Site and Services, configure the Security settings of the R0DC1
server object.

D.
From a command prompt, run the dsmgmt local roles command.

Explanation:
RODC: using the dsmgmt.exe utility to manage local administrators
One of the benefits of of RODC is that you can add local administrators who do not have full
access to the domain administration. This gives them the abiltiy to manage the server but
not add or change active directory objects unless those roles are delegated. Adding this type
of user is done using the dsmdmt.exe utility at the command prompt.