I'm in a situation where I'm trying to help out a friend who has little knowledge of his system. He is trying to install a program onto his domain controller and it gives an error stating that it cannot be installed on a RODC. This is the only DC that he has so I am assuming it is not a RODC. Is there a specific way I can have him determine what kind of server this was loaded as? I had him send me a dcdiag /v printout, but I couldn't determine one way or another if it was read only or not.
Asked
Active
Viewed 3.8k times
6
Ben Pilbrow
- 12,031
JArrington1
- 61
2 Answers
6
In 'Active Directory Users And Computers' browse to the RODC's computer object the DC Type should contain say ReadOnly if it is a RODC. The computer object properties on tab 'Managed by' should also show what type of DC it is.
0
You can get the DC detail with the help of PS. Go to your DC and type
nltest /DSGETDC:
i.e. PS C:\Users\44012231-730> nltest /DSGETDC:ABC.COM DC: \SKYBLUE.ABC.COM Address: \123.11.1.45 Dom Guid: 44c23f06-dff1-47c9-92e2-dd060e2c2b11 Dom Name: ABC.COM Forest Name: ABC Dc Site Name: 0SHSRNKDKJ Our Site Name: GSKDJFOENL Flags: GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE FULL_SECRET WS 0xC000 The command completed successfully
