Q. How do I modify user and group read-only domain controller (RODC) management permissions?

A. In the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in, choose the Domain Controllers folder, select RODC Computer Properties, and access the Managed By tab, as shown in the following screenshot.

In the Select User or Group field, you can set and modify the group names with permissions to manage your RODC. Notice that each RODC can have different server managers who aren’t necessarily domain administrators. Designated RODC managers can be domain users with permissions to manage an RODC.