RODC - What exactly gets replicated?

 

reading through doco on rodcs there lot of implications struggling paint absolute picture of gets replicated.

 

my first question is, groups (of kind) replicated rodcs?  i'm guessing can't find documented catagorically either way.

my second clarification of replication of user objects.  realise can restrict users allowed store cached credentials on rodc, user objects replicated rodc default, without credentials?

 

further this, aware of filtered attribute set, questions are, attributes replicated default (i.e. have actively select attributes not replicate) , how many attributes fall "system-critical" set (i.e. can't stop them replicating)?  example, can restrict replication of majority of user attributes (phone, address, org information)?

 

finally, has there been more on issue of allowing rodc gc (primarily support exchange)?

 

many thanks.

 

 

if want know more rodc, should consider visit "directory experts conference" (www.dec2007.com) in brussels next week. why? because i'm delivering presentation lot of information , demo's rodc...

 

to answer questions....

 

everything replicated rodcs except: attribute values attributes members of filtered attribute set (rodc-fas) , password hashes. passwords cached on rodc default password of own computer account , own kerberos account. groups, memberships, etc. replicated rodcs. user objects replicated rodcs, except password hash , whatever attribute member of rodc-fas...

about 28% of attributes in default w2k8 schema fall system critical set.

 

and yes, rodcs can gc

Windows Server  >  Directory Services