Active Directory 面试题与答案

Question: What is the purpose of the Read-Only Domain Controller (RODC) in Active Directory?

Answer: An RODC is a domain controller that holds a read-only copy of the Active Directory database. It enhances security by allowing organizations to deploy domain controllers in locations where physical security cannot be guaranteed.

Example:

In branch offices with limited physical security, an RODC can be deployed to provide authentication services without risking the exposure of sensitive information.