up vote 1 down vote favorite
share [g+] share [fb]

We need to deploy RODCs to many small satellite offices where we may want additional lightweight infrastructure there too (file, print, dhcp)

Are there any networking devices that include RODC functionality so users can log in with local credentials?

Update: I'm looking for other options similar to this Cisco WAAS Device, with Windows on WAAS (WoW)

If I were to take this a step further, are there devices that include lightweight file and print features as well?

link|improve this question
67% accept rate
I assume by "local login" you mean that the RODC authenticates instead of the writable domain controllers. RODC's do not allow local login by default. You need to add users in your branch office to the Password Replication Policy for "local login". Doing this negates the security benefits of a RODC (the passwords are stored locally for all authenticated users). You might want to investigate using BitLocker as well if you wish to pursue this configuration. – Joseph Kern Oct 26 '11 at 14:55
feedback

1 Answer

up vote 4 down vote accepted

An RODC is still a Domain Controller and requires a full or core installation of Windows Server 2008 or 2008 R2. Since it requires a normal installation of Windows and the installation of the Active Directory binaries, it, by definition, requires a server and not an appliance. It needs to be updated and maintained like any other Domain Controller in your organization. Just because it's not writable doesn't mean that it shouldn't be protected with the same safeguards as everything else.

link|improve this answer
Are you aware of any "appliances" that include the full server installation as you describe? – makerofthings7 Oct 26 '11 at 15:41
1  
@makerofthings7 What are you looking for? An appliance is typically server hardware in a sealed off box with the underlying OS hardened and hidden from the user that performs a very specific function. Cisco NAC appliances, for example, run CentOS on IBM server hardware, but come with a slick web interface for configuring everything. If your appliance has a disk or RAM issue, they just send you a whole new one and you just reload your config. By definition, a box wouldn't be an appliance if it runs a full-blown Windows Server install. – MDMarra Oct 26 '11 at 16:53
I updated the question with a comparable Cisco product "WWAS". Are there any others from other Manufacturers? – makerofthings7 Oct 26 '11 at 16:59
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.