NOTE: In the example below, the default domain admin account is selected. It's best practice to create a unique service account ...