Read only domain controllers

Other than the obvious, a situation where you cannot secure physical access to the domain controller, is there any other positive reason to have a RODC on a domain?

I have two sites and four DCs and I was thinking when I upgrade them, I would put one RODC and one writable in each site.

Has anyone seen or does anyone know of any good reasons to do this other than the physical access part?


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
Secure access is the only reason.
Will SzymkowskiSenior Solution ArchitectCommented:
RODC's are pretty usuless unless you are acutally using the PrP (Password Replicaiton Policy) which will speed up login times. If you have a read/write DC in the site there is no point to put an RODC in there as well. Typically if you have a decent network connection to another geographically close site, this is sufficent for DNS/logins etc.

RODC use other DC's information to view it in a Read Only view.

I personally would not implement this unless you have specific requirement to do so.

Guy LidbetterCommented:
Besides security, the other reason is if you have extremely slow or flaky links at a site. As replication is then one way and can be scheduled for once a day if you like.

There is no reason whatsoever to have them mixed in with a normal DC.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
crp0499CEOAuthor Commented:
Thank you
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.