RODC in tier0

[ruppde]

hi,

the "Is Tier Zero" of RODCs should be DEPENDS because because the RODCs might share the DSRM password with the DCs (synced via GPO).

https://adsecurity.org/?p=3592

arnim

[JonasBK]

Hi Arnim,

Thanks for your suggestion!

We only covered the RODC AD group in the first blog post / webinar, so that is the only RODC asset we have in the table so far. We will discuss the RODC computer objects and the RODC OS in a future episode. There are a lot of things to consider for RODC, and the thing you mention about the DSRM password is definitely a good point.

Thanks again,
Jonas