Exam 70-417 topic 1 question 138 discussion

Actual exam question from Microsoft's 70-417

Question #: 138
Topic #: 1

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1. The solution must not provide
RODC_Admins with the ability to manage Active Directory objects.
What should you do?

A. From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.
B. From Windows PowerShell, run the Set-ADAccountControl cmdlet.
C. From a command prompt, run the dsadd computer command.
D. From Active Directory Sites and Services, run the Delegation of Control Wizard.

Show Suggested Answer

Suggested Answer: A 🗳️

by francisallen at Nov. 14, 2019, 12:06 a.m.

Comments

Submit Cancel

plmmsg

4 years, 10 months ago

RODC: using the dsmgmt.exe utility to manage local administrators One of the benefits of RODC is that you can add local administrators who do not have full access to the domain administration. This gives them the ability to manage the server but not add or change active directory objects unless those roles are delegated. Adding this type of user is done using the dsmdmt.exe utility at the command prompt.

upvoted 1 times

...

francisallen

5 years, 7 months ago

none of the above. you may use dsmgmt local roles or lusrmgr.msc to add rodc_admin to local administrator group

upvoted 1 times

...