How does a Read Only Domain Controller work?

A Read Only Domain Controller (RODC) is a type of domain controller in a Windows Active Directory environment that only stores a read-only replica of the Active Directory database. This means that the RODC does not allow any write operations to the Active Directory database, providing an extra layer of security by minimizing the risk of unauthorized changes or data loss. RODCs are typically used in branch offices, remote locations, or other situations where physical security of the domain controller cannot be guaranteed. Users can authenticate and access resources through the RODC, but any changes made to the Active Directory database must be replicated from a writable domain controller.

This mind map was published on 15 June 2024 and has been viewed 84 times.