Question
Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.
You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local
Administrators group on Server1.
You need to recommend a deployment plan that meets the following requirements:
✑ Ensures that a user named User1 can perform the RODC installation on Server1
✑ Ensures that you can control the AD DS replication schedule to the Server1
✑ Ensures that Server1 is in a new site named RemoteSite1
Uses the principle of least privilege
Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation
1. Create a site and a subnet. Creating RemoteSite1 with a subnet for the new datacenter places Server1 in its own site. When you create a site, you must add it to a site link. Replication to the site then follows that site link's schedule, so you can control when AD DS replicates to Server1. The existing DEFAULTIPSITELINK can be used for this, so creating a separate site link is not required.
2. Pre-create an RODC account. A Domain Admin pre-stages the RODC computer account in RemoteSite1, chooses the replication settings, and names User1 as the delegated administrator. This lets a user who is not a domain administrator finish the installation.
3. Instruct User1 to run the Active Directory Domain Services installation Wizard on Server1. User1 is a local administrator on Server1 and the delegated administrator of the pre-created account, so User1 can attach the server to the account and complete the RODC installation. Adding User1 to Contoso\Administrators would also work, but it grants far more rights than needed, which breaks the principle of least privilege.
