Overview #

The PARTIAL_SECRETS_ACCOUNT is a user-Account-Control Attribute Value that implies the (Windows Server 2008/Windows Server 2008 R2) account is a read-only domain controller (RODC). Removing this setting from an RODC compromises security on that server.
This is a security-sensitive setting. Accounts that have this option enabled should be tightly controlled.

More Information #

There might be more information for this subject on one of the following: