You need to ensure that the RODC is configured to meet the following requirements: Cache passwords for all of the members of Branch1Users