Your network contains an Active Directory domain named contoso.com. The domain
contains a read-only domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware
and the software on RODC1. The solution must not provide RODC_Admins with the ability to
manage Active Directory objects.
What should you do?

A.
From Active Directory Users and Computers, configure the Managed By settings of the
RODC1 account.

B.
From Windows PowerShell, run the Set-ADAccountControlcmdlet.

C.
From a command prompt, run the dsadd computer command.

D.
From Active Directory Sites and Services, run the Delegation of Control Wizard.