Three times a week, John Savill tackles your most pressing IT questions. Today, he shares more about removing a dead Domain Controller from Windows Server 2016, manually installing System Center Endpoint Protection on a device, and assigning limited scope administrator role in Azure Active Directory via the portal.