Overview #
The PARTIAL_SECRETS_ACCOUNT is a
user-Account-Control Attribute Value that implies the (Windows Server 2008/Windows Server 2008 R2) account is a
Read-Only Domain Controller (
RODC). Removing this setting from an
RODC compromises security on that server.
This is a security-sensitive setting. Accounts that have this option enabled should be tightly controlled.
There might be more information for this subject on one of the following: