****Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.
You configure a user named User1 as a delegated administrator of DC10.
You need to ensure that User1 can log on to DC10 if the network link between the Main site and the Branch site
fails.
What should you do?
A.
Add User1 to the Domain Admins group.
B.
On DC10, modify the User Rights Assignment in Local Policies.
C.
Run repadmin and specify the /prp parameter.
D.
On DC10, run ntdsutil and configure the settings in the Roles context.
Explanation:
Repadmin /prp replicates the password to the RODC so User1 can log on to DC10 without it needing to check
against a writable DC
I believe the answer is correct, but the explanation is wrong.
Repadmin /?
…
/prp This command allows an admin to view or modify the password replication policy for RODCs.
…
/replicate Triggers the immediate replication of the specified directory partition to the destination domain controller from the source DC.
…
1
0
The /replicate switch does not appear to cause the password to cache even if it is listed in the PRP. Not sure of anyway to prepopulate password outside of the advanced options on the PRP tab in ADUC.
0
0