Microsoft RODC Read Only Domain Controller
Read Only Domain Controllers A new feature in Windows 2008 is a new type of domain controller the Read-Only Domain Controller known as RODCs. An RODC makes it possible for organizations to easily deploy a domain controller in scenarios where physical security cannot be guaranteed, such as branch office locations, or in scenarios where local storage of all domain passwords is considered a primary threat. The RODC also have copy of the Active Directory (AD) database, but the contents of the replica of the database on the domain controller is read-only and write operations are not supported. It is also important to know that the RODCs do not participate in Active Directory replication in the same way as writable domain controllers. The difference between RODC replication and the multimaster replication model between writable domain controllers is that RODC replication is unidirectional. This means all changes from a writable domain controller are propagated to the RODCs. The resu...