Questions tagged [rodc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
23 views

Readonly Domain Controller for Remote Office

We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
user avatar
1 vote
1 answer
591 views

Group Managed Service Accounts (GMSA) and Read-Only Domain Controllers (RODC)

We have RODC in a DMZ site and we would like to use GMSA, but the problem is that since domain controllers are read-only, it seems that I have to set a password at the creation of a new account such ...
user avatar
0 votes
1 answer
605 views

Adding a rodc to an existing domain failed

I want to add a new RODC to an existing domain. The new RODC is a Server 2012R2 and the existing domain is a 2008R2 domain. The firewall on both sites is offline and both can reach each other per ...
user avatar
0 votes
1 answer
27 views

Creating transportable servers (Windows Server 2008 R2)

Question: What would be the best way to achieve the desired situation? RODC's? Current situation: We have two domain controllers both with OS in RAID1 and DATA in RAID5. We also have two extra HP ...
user avatar
0 votes
2 answers
3k views

How do I get Samba to use a specific domain controller?

Currently, I have Samba on Ubunut Linux 16.04 connecting to a domain controller. When I joined, I joined to ad-1.example.com; however, after two weeks, it found read-only-adc.example.com on its own ...
user avatar
1 vote
0 answers
3k views

80090308: LdapErr: DSID-0C0903D9, comment: AcceptSecurityContext error, data 0, v2580

Trying to fastbind against an RODC and I'm getting the following error: 80090308: LdapErr: DSID-0C0903D9, comment: AcceptSecurityContext error, data 0, v2580 I have googled around and don't have ...
user avatar
  • 11
-1 votes
1 answer
33 views

RODC and domain database [closed]

Supposed I have 1 domain (in 1 tree 1 forest), say, computer.local. And 4 DCs: DC01, holds all 5 FSMOs DC02, DC03, DC04, RODC. All of them connected each other. Suppose I log on to DC02, and run [...
user avatar
1 vote
1 answer
1k views

Windows RODC/DMZ connection to trusted AD issue

I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
user avatar
0 votes
1 answer
268 views

Error in creating RODC

I have a win server 2012 r2 server named ws7. from my other windows 2012 server that is currently our primary active directory server named ws4 I am trying to create a RODC for a remote office with ...
user avatar
  • 737
8 votes
2 answers
778 views

Is there a difference in bandwidth consumption between a RODC and RWDC?

My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
user avatar
2 votes
1 answer
283 views

AD Forest/Domain Functionnal Rollback with DirSync/ADFS in place

At our main site we are running at 2012R2 (forest/domain) functional level and we currently have migrated our mailboxes to Office 365 using an exchange hybrid configuration with ADFS and Dirsync. We ...
user avatar
  • 5,026
4 votes
2 answers
2k views

Joining a NetApp to a domain on a Read Only Domain Controller

I have an isolated network, into which I've built a vfiler. The point of this network is that it's a non routed 'test' network. However, there's a need for LDAP/Kerberos and CIFS access to the filer,...
user avatar
  • 3,697
3 votes
1 answer
1k views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
user avatar
  • 176
2 votes
1 answer
3k views

Trust relationship failure with RODC

I have numerous servers that sit in a DMZ which has an RODC in it as well. As you probably know, the machine passwords will change after a certain amount of time. After which I have to disjoin-rejoin ...
user avatar
  • 39
1 vote
1 answer
539 views

active directory rodc or sub site for New branch office

This may sound silly but I am no ad expert. We have setup a new branch office and 2 users will be moving to that office to man a point of sales system, the internet connectivity is poor so ...
user avatar
0 votes
2 answers
221 views

RODC password replication and A/D sites and subnets

I work at a school district with about 30 school sites. Windows 2008 A/D setup - all central at the district office. In A/D, all is under one site, and no subnets defined. One A/D forest and only one ...
user avatar
2 votes
2 answers
3k views

How to logon with local account? RODC "There are no logon servers to process your request"

I have a site-to-site VPN, writeable DC in the main office, Read-only DC in a branch office. Today the VPN went down, but I couldn't log in to the read-only DC - the error message came up There are ...
user avatar
  • 1,120
3 votes
1 answer
2k views

Synchronizing RODCs to NTP servers?

I've read this nice article from Gareth Hooper regarding Domain Controller syncing to external time sources. In essence, he wrote that although Microsoft don't actually condone the practice, it's a ...
user avatar
  • 4,888
4 votes
2 answers
3k views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
user avatar
1 vote
1 answer
2k views

assign an OU to a certain RODC

I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and its content will be replicated to all DCs within the domain. So I want to know can we assign an OU to a ...
user avatar
  • 145
1 vote
0 answers
327 views

Wrong time on RODC after dcpromo

My team has been experiencing this strange problem: After doing dcpromo (followed by reboot), the time on the newly promoted RODC rolls back to the year 2011. Before dcpromo, the time is correct. ...
user avatar
  • 4,888
1 vote
0 answers
95 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration supported?...
user avatar
  • 155
9 votes
2 answers
2k views

Win7 clients failing with cached credentials on samba4 RODC

I'm setting up a test environment for a customer about to deploy samba4 into 1400 remote sites and I'm running into a problem. It's my job, after all, to run into problems and then solve them. Active ...
user avatar
  • 38.7k
3 votes
1 answer
931 views

passwordless AD domain join

I remember back in the olden days of Windows NT you could create "blank" computer accounts so that anyone could join a computer of that name to the domain. I would like to do the same thing with ...
user avatar
  • 38.7k
2 votes
1 answer
2k views

Why can I create objects on my read only domain controller?

I have a Windows Server 2012 Domain Controller. I have configured another Server 2012 machine as a Read-Only Domain Controller. When I log in with domain administrator credential on my RODC I can ...
user avatar
  • 31
3 votes
1 answer
931 views

Possible to upgrade a Windows 2008R2 RODC Core Domain Controller to 2012 w/GUI

We have some W2K8R2 DCs that are installed in Core or Core/Read only mode. We would like to upgrade to Windows 2012. Our goal is to also remove the "read only" attribute, and add the GUI. Would ...
user avatar
1 vote
2 answers
1k views

AD Replication to RODC; Failover to RODC when DC is Unavailable

I have successfully setup a Router on a Stick and have two subnets: 10.0/16 10.1/16 My Router's sub interfaces are set to 10.0.0.1 and 10.1.0.1, respectively. My primary domain controller, running ...
user avatar
  • 3,395
2 votes
1 answer
2k views

Best way to back up a domain controller before upgrading it from 2003 to 2008 OS?

I am trying to convert a DC from a 2003 DC to a 2008 RODC. Before I can do that, I must have a writable 2008 DC in my domain. I have a Windows 2003R2 x86 DC that I would like to upgrade to Windows ...
user avatar
  • 165
2 votes
1 answer
6k views

SYSVOL not replicating to some RODC

I'm stumped. I was trying to replicate a file (corporate wallpaper) to branch offices via SYSVOL (so that workstations in branch offices don't have to pull the file from HO). However, the replication ...
user avatar
  • 4,888
2 votes
1 answer
162 views

Windows 2008R2 RODC

Quick and easy one for the return after Easter;) I upgraded a clients domain a few months ago from a 2003DC to a 2008R2 Domain. All went OK, few issues we solved along the way but all good now. ...
user avatar
  • 153
0 votes
1 answer
230 views

Read only active directory option is greyd out

I want to deploy a RODC sever in an existing domain.I fulfilled all pre-requisite for RODC.There are two DCs in the domain both 2008 r2.When i try to install third DC in same forest,the Read only ...
user avatar
  • 3
2 votes
4 answers
232 views

RODC deployment

Is it useful to enhance security by implementing RODC in the same site, which RWDC exist also? Pointing the site user the RODC instead of the RWDC. Thanks.
user avatar
  • 21
0 votes
1 answer
2k views

SharePoint Server 2010 change Domain Controller to RODC

i'm struggeling with the SharePoint Server 2010. I moved my SPS 2010 into a DMZ within the same site as my RODC. The SPS 2010 should get AD information from the RODC, but however, it dosen't, since it ...
user avatar
  • 3
7 votes
1 answer
2k views

RODC and remote site

I have a two-site domain (call them Local and Remote). Site Local has our main IT infrastructure, including two Active Directory Domain Controllers (2008R2). We're trying to set up an RODC at site ...
user avatar
  • 443
2 votes
3 answers
477 views

Alternatives to the Cisco "Windows Server on WAAS appliance" for satellite office usage [closed]

We need to deploy RODCs to many small satellite offices where we may want additional lightweight infrastructure there too (file, print, dhcp) Are there any networking devices that include RODC ...
user avatar
2 votes
1 answer
198 views

Can't deploy branch RODC

I am trying to deploy a branch office RODC and am getting an error about extending the domain and forest schema. I know I have already done this in the past but I went ahead and tried from the main ...
user avatar
6 votes
1 answer
1k views

Can Read-Only Domain Controller in External location work when VPN tunnel is down?

I have client which has multiple sites all over the world. They have 2 domain controllers in main location and every other location connects thru to main site with vpn tunnel. Currently the network is ...
user avatar
  • 3,703
0 votes
2 answers
4k views

Installing Exchange in a RODC Site

I'm trying to install Exchange 2010 to a server in a site that uses an RODC. It tells me that "No domain controllers for the domain DOMAIN and the site SITE are available" I'm going to be moving the ...
user avatar
  • 1,101
0 votes
1 answer
13k views

Computers not authenticating to RODC in their site

I've got an RODC in our local site and a PDC in our co-location facility. I run SET on any of the computers in our local site and they all say LOGONSERVER='PDC'. They should all be authenticating to ...
user avatar
  • 1,101
1 vote
1 answer
1k views

Windows Server 2008 R2 RODC shows no installed updates, won't install updates, won't run DCPROMO to allow demotion

I have a Windoer 2008 R2 RODC. It runs AD DS and DNS and that's it. The install is less than a day old. Windows update hangs at "downloading updates" indefinitely, Server Manager errors on refresh ...
user avatar
  • 100k