I have a head office with many satellite locations. The root DC server is at the Head Office and each of the locations has its own DC server. The Domain Controllers are running windows server 2008 R2
My main question is:
- Are log events, specifically security log events, that are registered at a specific domain controller replicated on other domain controllers, or at least to root DC? and would the root DC server be the central repository of all these logs or would every DC server have the same set of logs.
I have a less important question:
- if the logs are replicated, are all event types replicated or just some event types. Is there a reference explaining this?