Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Firstly, I'm not sure how friendly the users of this site are to students but my question seems to be well suited.

I am configuring a domain with multiple Windows Server 2008 machines and am curious whether I can successfully install certain roles on a read-only domain controller. I'm not sure whether the read-only configuration applies only to the Active Directory role or to other roles on that server. I ask because I am unable to make changes to DNS from the read-only machine, which leads me to believe that other roles would also be affected in this way. I do know that the issue with DNS may be because it relies on Active Directory, but still I am unsure.

Thanks to anyone who takes the time to read and answer my question.

share|improve this question
Welcome to SF! We don't bite - usually :) This is a good question. Best thing to keep in mind is to pay attention to the FAQ and to work as hard with your situation as we do helping you with it. Students are welcome! But the homework questions where you want all the answers are not. Keep that in mind and you're usually good. – squillman Feb 26 '10 at 3:18
You get a +1 from me just for being up front and not asking us to pass exams for you, like so many others have done. Good question as well. – John Gardeniers Feb 26 '10 at 8:03

Check this:

Here is the meat from that article (notice the last item, it relates to your DNS issues):

What new functionality does this feature provide?

RODC addresses some of the problems that are commonly found in branch offices. These locations might not have a domain controller. Or, they might have a writable domain controller but not the physical security, network bandwidth, or local expertise to support it. The following RODC functionality mitigates these problems:

Read-only AD DS database

Unidirectional replication

Credential caching

Administrator role separation

Read-only Domain Name System (DNS)

share|improve this answer
Thank you for your time/help. – BrianR Feb 26 '10 at 3:05
sure thing, keep an eye on your post here, as other sys admins might chime as well with their worth while input =) – Malnizzle Feb 26 '10 at 3:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.