Winrox - Architecture of Acceleration(TM) : RODC

Branch Office: Removing an RODC from AD

jeffl — Sat, 12 Dec 2009 06:20:00 GMT

Well eventually you are going to remove an RODC and if you are running in a test lab sooner rather than later. Microsoft has a TechNet Article which covers removing the RODC with the claim that AD metadata is removed. I have not found that to be entirely...(read more)

RODC: How to Defrag or Compact the Active Directory Database

jeffl — Sat, 28 Nov 2009 17:22:00 GMT

A Read Only Domain Controller has the benefit of being able to perform administrative maintenance tasks without entering into Active Directory Restore Mode which previously required a reboot. The following command shows how to compact the Active Directory...(read more)

RODC: What Services Stop when you stop the Active Directory Domain Service

jeffl — Sat, 28 Nov 2009 17:11:00 GMT

When you stop the Active Directory Domain Services you should make note that the following services also stop: File Replication Kerberos Key Distribution Center Intersite Messaging DNS Server DFS Replication Stopping the Active Directory Domain Services...(read more)

RODC: Effects of being able to start and stop the Domain Controller Service without reboot.

jeffl — Sat, 28 Nov 2009 15:28:00 GMT

A primary benefits of Read Only Domain Controllers is that the Domain Controller service can be managed like a regular service. It can therefore be stopped and started without rebooting the server. The effect of this is that the Active Directory database...(read more)

RODC: Administrative Permisions Available for Delegation

jeffl — Sat, 28 Nov 2009 15:07:00 GMT

The following is a list of permissions which are supported or not supported for delegation to an RODC delegated administrator. Supported: Active Directory Users and Computers Domain Controller Service Kerberos Key Distribution Center Active Directory...(read more)

RODC: Using the dsmgmt.exe utility to manage local administrators

jeffl — Sat, 28 Nov 2009 14:49:00 GMT

One of the benefits of of RODC is that you can add local administrators who do not have full access to the domain administration. This gives them the abiltiy to manage the server but not add or change active directory objects unless those roles are delegated...(read more)

Read Only Domain Controllers - Features and Benefits

jeffl — Sat, 28 Nov 2009 09:26:00 GMT

The folowing is a list of features and benefits for read only domain controllers. Features: The deployment of RODC major features : Unattended installation and DCPROMO changes . You install an RODC by selecting Additional Options in the DCPROMO wizard...(read more)

Branch Office: Creating a Read Only Domain Controller

jeffl — Wed, 25 Nov 2009 20:29:00 GMT

Branch offices come with a whole set of considerations and not the least of which is they generally are less secure than the main office. This is a critical concern for putting a domain controller in each office. The primary issue in almost every branch...(read more)