Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server 2025. All domain controllers run Windows Server 2019. The domain contains a user named User1.
You need to ensure that User1 can promote Server1 to a domain controller. The solution must follow the principle of least privilege.
Which groups should User1 be a member of?
Submit