AD Deployment Tutorial: Installing a read-only domain controller (RODC)

Because of the distance, we may sometimes need DC in some offices, but there is no professional IT technician, then set up a read-only domain controller.

Characteristics:

Read-only AD DS database

A read-only copy of all objects and attributes on a writable domain controller except the account password is saved on the RODC, and all changes to the AD DS database are made only on writable domain controllers and then replicated to the RODC; An application that needs to read a directory can obtain access rights. A Lightweight Directory Application Protocol (LDAP) application that requests write access receives an LDAP referral response that directs it to a writable domain controller.

One-way replication

Because any ad database changes are not written to the RODC, the writable domain controller does not need to replicate any information from the RODC. The RODC performs only normal inbound replication.

Credential caching

By default, no user or computer credentials are stored on the RODC except for the computer account and special Account krbtgt of the RODC. However, you can set the password replication policy to directly service the logon request by copying some of the user credentials and computer credentials from the writable domain controller to the RODC and caching them on the RODC.

Administrator Role separation

You can delegate the local administrative rights of the RODC to other domain users to share the work of the domain administrator. Read-only read-only read-only DNS can install DNS on an RODC to respond to requests for name resolution, but the DNS is also read-only

Environment:

Primary DC:WIN08DC2 Read Only DC:WIN08DC3

ip:192.168.1.3 ip:192.168.1.4

Subnet mask: 255.255.255.0 subnet Mask: 255.255.255.0

Gateway: 192.168.1.1 Gateway: 192.168.1.1

dns:192.168.1.3 dns:192.168.1.3

192.168.1.4

Click to run input dcpromo to open the AD Domain Services Installation Wizard

Follow the steps we have to install additional domain controllers step by step.