You need to ensure that the new RODC will be able to re…

Your network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

The Branch site contains a perimeter network.
For security reasons, client computers in the perimeter network can communicate with client computers in the Branch site only.
You plan to deploy a new RODC to the perimeter network in the Branch site.
You need to ensure that the new RODC will be able to replicate from DC10.
What should you do first on DC10?

Your network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

The Branch site contains a perimeter network.
For security reasons, client computers in the perimeter network can communicate with client computers in the Branch site only.
You plan to deploy a new RODC to the perimeter network in the Branch site.
You need to ensure that the new RODC will be able to replicate from DC10.
What should you do first on DC10?

A.
Run dcpromo and specify the /createdcaccount parameter.

B.
Run the Active Directory Domain Services Configuration Wizard.

C.
Run the Add-ADDSReadOnlyDomainControllerAccount cmdlet.

D.
Enable the Bridge all site links setting.

Explanation:
Creates a read-only domain controller (RODC) account that can be used to install an RODC in Active Directory.
Note:
* Notes
Once you have added the RODC account, you can add an RODC to a server computer by using the Install-ADDSDomainController cmdlet with the –
ReadOnlyReplica switch parameter.
* Example
Adds a new read-only domain controller (RODC) account to the corp.contoso.com domain using the North America site as the source site for the replication source
domain controller.
C:\\PS>Add-ADDSReadOnlyDomainControllerAccount -DomainControllerAccountName RODC1 – DomainName corp.contoso.com -SiteName NorthAmerica
Add-ADDSReadOnlyDomainControllerAccount



Leave a Reply 4

Your email address will not be published. Required fields are marked *

1 × four =


kevin

kevin

Answer is B you cant replicate from a RODC so need to Make DC10 a Full DC

Ivan Drago

Ivan Drago

Answer is B.

Differences Between an RODC and a Writable Domain Controller:
https://technet.microsoft.com/en-us/library/cc771545(v=ws.10).aspx

Data replication between domain controllers:

An RODC only replicates data from a writable domain controller, and it never replicates data to another domain controller in the domain. This is true for both the Active Directory data and the SYSVOL data.

justbecause

justbecause

Agree with ‘B’ can’t replicate from a RODC.

dunderhead

dunderhead

besides the impossible replication from a RODC, in order to make a RODC writeable, it must be demoted and promoted from a member server state. ADDS Configuration Wizard (answer B) is the only option to start demotion.