A read-only domain controller (RODC) is a new type of domain controller in the Windows Server 2008 operating system. An RODC hosts a read-only Active Directory Domain Services (AD DS) database. With an RODC, organizations can easily deploy a domain controller in locations where physical security cannot be guaranteed.

In this guide