Active Directory® Administrator's Pocket Consultant

Chapter 4. Deploying Read-Only Domain Controllers

• Preparing to Deploy Read-Only Domain Controllers

• Adding RODCs to Domains

• Using Staged Installations

• Decommissioning RODCs

• Setting Password Replication Policy

When the domain and forest are operating at the Windows Server 2003 functional level or higher, Active Directory supports both writable and read-only domain controllers. Writable domain controllers are the primary type of domain controllers you will use throughout the enterprise. Read-only domain controllers (RODCs) host read-only replicas of a domain’s Active Directory database and are designed to be placed in locations that require fast and reliable authentication services but aren’t necessarily secure. As such, RODCs are ideally suited to the ...