locked
RODC User Password is Cached or Replicated? RRS feed

  • Question

  • I read some articles regarding password replication policy. The word 'cache' and 'replicate' was used interchangably. My question: is the password cached on RODC or replicated to RODC?

    In my term,
    Cached means that the RODC don't have user password until the user tries to logon. Once the RODC was rebooted the password cache is cleared.
    Replicated means that the RODC and RWDC replicate user password on a regular basis, regardless of whether the user logon. The replicated password is still stored in the RODC even after rebooting?

    Thanks. 
    Thursday, March 18, 2010 9:19 AM

Answers

  • Some have mentioned that cache is a misnomer in the context of RODCs. Passwords are not cached on an RODC in the sense of being stored in volatile memory that is wiped clean at reboot. Instead, they are replicated to the AD database of the RODC (if the Password Replication Policy allows it) and they stay there regardless of whether the RODC is restarted.

    If you can cite any TechNet topics you were reading, we can try to clarify this point there. 

    Thanks,

    Justin [MSFT]

    Active Directory Documentation Team

     

    • Marked as answer by Tim Quan Thursday, April 1, 2010 9:40 AM
    Wednesday, March 24, 2010 10:28 PM

All replies

    • Marked as answer by Tim Quan Thursday, April 1, 2010 9:40 AM
    • Unmarked as answer by Li Zhen Thursday, April 8, 2010 8:47 AM
    Friday, March 19, 2010 12:42 AM
  • Some have mentioned that cache is a misnomer in the context of RODCs. Passwords are not cached on an RODC in the sense of being stored in volatile memory that is wiped clean at reboot. Instead, they are replicated to the AD database of the RODC (if the Password Replication Policy allows it) and they stay there regardless of whether the RODC is restarted.

    If you can cite any TechNet topics you were reading, we can try to clarify this point there. 

    Thanks,

    Justin [MSFT]

    Active Directory Documentation Team

     

    • Marked as answer by Tim Quan Thursday, April 1, 2010 9:40 AM
    Wednesday, March 24, 2010 10:28 PM
  • Some have mentioned that cache is a misnomer in the context of RODCs. Passwords are not cached on an RODC in the sense of being stored in volatile memory that is wiped clean at reboot. Instead, they are replicated to the AD database of the RODC (if the Password Replication Policy allows it) and they stay there regardless of whether the RODC is restarted.

    If you can cite any TechNet topics you were reading, we can try to clarify this point there. 

    Thanks,

    Justin [MSFT]

    Active Directory Documentation Team

    Wednesday, March 24, 2010 10:29 PM