Have a Windows 2003 Forest with an Empty root and a child domain. Forest & Domain functional level - W2k3. I have introduced a new w2k8 RWDC. I would like to know at what time do we start seeing the above said groups in AD? will they start appearing only after the 1st RODC is installed? In a Windows 2008 Forest we see these groups by default I can however see the GUID of Enterprise RODC group added to all NC guess its because of running adprep /rodcprep, its reflects as Unknown Account when viewed using w2k8 DC