rodc

A Read-Only Domain Controller (RODC) is a type of domain controller in Windows Server that hosts a read-only copy of the Active Directory database. Unlike a writable domain controller, an RODC is designed for branch office or remote locations where physical security cannot be guaranteed. However, users have reported issues where an RODC unexpectedly allows adding, modifying, or deleting users and groups, contrary to its intended read-only behavior. Troubleshooting steps include verifying the RODC's configuration and ensuring that the Password Replication Policy is correctly set. Additionally, known problems exist with the Active Directory Users and Computers MMC snap-in crashing when attempting to delete an RODC, and with certain Windows updates failing to install on RODCs. These issues often require specific hotfixes or workarounds from Microsoft.