This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 14 lines
!!! Overview
[{$pagename}] ([RODC]) is a [ReadOnly] [Microsoft Active Directory] [Domain Controller]The [Filtered Attribute Set] ([FAS]) is the set of attributes __NOT__ replicated to an [{$pagename}]. The default FAS contains the following:
– ms-PKI-DPAPIMasterKeys
– ms-PKI-AccountCredentials
– ms-PKI-RoamingTimeStamp
– ms-FVE-KeyPackage
– ms-FVE-RecoveryPassword
– ms-TPM-OwnerInformation
Items you place in the FAS aren’t replicated, in case the RODC is placed at a lower security site and then compromised. Therefore, you can add items to the FAS so that they aren’t replicated.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]