Perspective (RODC’s and Full DC’s)
Posted by BPuhl on December 13, 2007
It’s always good to keep things in perspective. This is especially true when you start troubleshooting replication issues. One of the engineers came by, curious because he was looking in AD Sites and Services, and there were no connection objects for the RODC’s.
It turned out, that his MMC snap-in was pointed at the full DC. Since connection objects are created by the KCC locally…and an RODC cannot replicate anything back to the full DC… then the “view” of the connection objects is only available when you point the MMC at the RODC itself. Sure enough, when he did that, there they were.
Perspective is going to become hugely important to remember as RODC’s are deployed with Windows Server 2008. For the past 7 or 8 years, we’ve sort of taken for granted that the directory was “loosely consistent”, and in all but ugliest troubleshooting cases we were able to pop open a snap-in and look at the data “in the domain” or “in the forest”. This isn’t true anymore, and for some things, like replication data, it’s going to be critical to make sure that you get the right “view” of the enterprise but peering into the correct window (err…ummm….Windows)