i'm able to modify active directory database in rodc

Hello,
We want to install RODC in branch office we're testing now but we can create
or delete user in rodc. i logged on with administrator account.
is this possible or we do something wrong?

Howdie!

Am 15.05.2010 15:59, schrieb Ekrem:
> We want to install RODC in branch office we're testing now but we can create
> or delete user in rodc. i logged on with administrator account.
> is this possible or we do something wrong?

Have a look at the console you're using. Depending on what console you
use to do that, you see that it automatically targets a writable DC. If
it targets the RODC, there write-request is redirected to a full-DC, so
no, there's no modification made to the database on a RODC except for
replicated changes.

Cheers,
Florian

Hello Ekrem,

What you see is correct, as long as you have connectivity to a RWDC the request
will be forwarded to it. If you break the connection to a RWDC you should
see that creating/deleting isn't possible anymore.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
> We want to install RODC in branch office we're testing now but we can
> create
> or delete user in rodc. i logged on with administrator account.
> is this possible or we do something wrong?