70-648 · Question #17
Your network contains an Active Directory domain named contoso.com. The network has a branch office site that contains a read-only domain controller (RODC) named RODC1. RODC1 runs Windows Server…
The correct answer is B. the Member Of properties of User1. For a user's password to be cached on an RODC, they need to be a member of the Allowed RODC Password Replication group. Therefore, we need to modify the group membership of User1, not RODC. This can also be done from the properties of RODC in ADUC, but not on the "Member Of"…
Question
Your network contains an Active Directory domain named contoso.com. The network has a branch office site that contains a read-only domain controller (RODC) named RODC1. RODC1 runs Windows Server 2008 R2. A user named User1 logs on to a computer in the branch office site. You discover that the password of User1 is not stored on RODC1. You need to ensure that User1's password is stored on RODC1. What should you modify?
Options
- Athe Member Of properties of RODC1
- Bthe Member Of properties of User1
- Cthe Security properties of RODC1
- Dthe Security properties of User1
How the community answered
(62 responses)- A5% (3)
- B85% (53)
- C2% (1)
- D8% (5)
Explanation
For a user's password to be cached on an RODC, they need to be a member of the Allowed RODC Password Replication group. Therefore, we need to modify the group membership of User1, not RODC. This can also be done from the properties of RODC in ADUC, but not on the "Member Of" tab (it would be done on the Password Replication Policy tab). The Security properties would allow us to configure what permissions objects have over User1's account, but this will not help ensure his username is cached.
Topics
Community Discussion
No community discussion yet for this question.