thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Systems & Data Center · Intermediate

Read-Only Domain Controller (RODC)

A domain controller holding a read-only copy of the AD database, designed for branch offices with weak physical security.

Definition

RODCs do not cache passwords by default; a Password Replication Policy defines which accounts' credentials can be cached. Changes are referred to writable DCs, and an RODC's own krbtgt account limits the impact of compromise.

Example

A remote warehouse deploys an RODC so local logons work even when the WAN is down.

Exam tip

RODCs fit low-security branch sites; only accounts allowed by the Password Replication Policy are cached.

Related terms