Shulou(Shulou.com)06/02 Report--

RODC has great value for small branches, reasonable use can reduce network traffic (if rodc also serves as GC, replication will consume traffic, but still recommended to designate GC), improve client login speed and resolution speed (if DNS is integrated). Integration is strongly recommended).

The following is a simple summary of the knowledge points:

By default, no passwords are cached on RODC. (can be assigned)

If the user in the domain does not log in at a remote location, the user's password is not stored in the RODC. (if assigned)

Denied rodc password replication and allow rodc password replication are default groups that apply to all RODCs in the domain once a user or group is added, i.e. copied to all RODCs and denied priority.

If not assigned as GC, universal group membership caching needs to be enabled for proper user authentication.

Assign password caching policies to certain groups of user computers

Open ACTIVE DIRECTORY User and Computer Find DOMAIN CONTROLLER OU Double-click RODC, switch to password copy policy, click Add button, and the dialog box Add or Reject will appear as shown in the figure above. The information part has been added as allowed password caching.

This adds an allowable deny list for only one read-only domain controller, not all RODCs.

6. preset password

Preset password means that the password of the user or computer is forcibly cached in RODC, so that the identity can be verified normally even if the connection with the writable domain controller is disconnected.

Prerequisites: Users and computers must have been added to the Allow list, as shown in the figure above.

Open the RODC Properties dialog box, click Advanced in Password Copy Policy, select preset password in the pop-up dialog box, add user and computer, as shown in the figure, a computer and a user have been added.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.