Read-Only Domain Controller (RODC)

GPTKB entity

Predicate	Object
gptkbp:instanceOf	gptkb:Domain_Controller gptkb:Active_Directory_Feature
gptkbp:abbreviation	gptkb:RODC
gptkbp:canBe	Global Catalog server
gptkbp:canBeDeployedOn	gptkb:Windows_Server_2008 gptkb:Windows_Server_2012 gptkb:Windows_Server_2016 gptkb:Windows_Server_2019 gptkb:Windows_Server_2022
gptkbp:canBeManagedBy	Delegated local administrator
gptkbp:characteristic	Read-only copy of Active Directory database
gptkbp:compatibleWith	FSMO roles All user credentials by default Direct changes to Active Directory database
gptkbp:doesNotReplicateTo	Other Domain Controllers
gptkbp:hasFeature	gptkb:Administrator_Role_Separation gptkb:Password_Replication_Policy Filtered Attribute Sets
https://www.w3.org/2000/01/rdf-schema#label	Read-Only Domain Controller (RODC)
gptkbp:improves	Security in untrusted locations
gptkbp:introducedIn	gptkb:Windows_Server_2008
gptkbp:managedBy	gptkb:Domain_Administrators
gptkbp:partOf	gptkb:Active_Directory_Domain_Services
gptkbp:reduces	Risk of credential theft
gptkbp:replicatesFrom	gptkb:Writable_Domain_Controller
gptkbp:requires	At least one writable Domain Controller
gptkbp:supports	Credential caching DNS Server role
gptkbp:usedFor	Branch office deployments
gptkbp:bfsParent	gptkb:Active_Directory_Service
gptkbp:bfsLayer	7