This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Logonserver = RWDC instead of RODC

Question
0

Sign in to vote

Hi!

Entering "set" on a client machine in branch office with RODC shows Logonserver = the name of RWDC in Head Office. Is this normal or it should be the name of RODC in that branch?

Secondly, do I have to allow communication between a client machine in the branch and the RWDC in Head Office from the firewall if I need to connect this client to domain even if there is an RODC in the branch?

Thanks.

Tuesday, April 30, 2013 8:29 PM

Answers

0

Sign in to vote
Hi,

One way to accomplish this is to simply make sure that the user in question is a member of Allowed RODC Password Replication Group (and is not a member - directly or indirectly - of Denied RODC Password Replication Group)

In RODC, there is a option to cash user credentials in it locally.
Other wise all the time user authentications will be done by Normal/ Full DC/GC only.
Links to enable

Credential Caching on a Windows Server 2008 RODC

http://mcpmag.com/articles/2008/12/01/credential-caching-on-a-windows-server-2008-rodc.aspx
http://technet.microsoft.com/en-us/library/cc753459(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc732801(WS.10).aspx

Please also refer to the below similar thread:

http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/0f320a7b-f7c1-45ee-9bbc-3a12faf6b3f6

Regards,

Yan Li
Cataleya Li
TechNet Community Support
- Marked as answer by Yan Li_ Thursday, May 9, 2013 4:46 AM
Friday, May 3, 2013 6:52 AM