Question

Which of the following will happen when a user attempts to log on if the WAN link to a writable domain controller is not available, and the password for a computer account is cached on an RODC?

a. The user will be unable to log in.
b. The RODC will contact the writable domain controller over the WAN link.
c. The RODC will use the cached password for authentication.
d. The user will be prompted to enter a new password.

Answer 1

If a user's login credentials are cached on an RODC and the writable domain controller is unreachable, the RODC will use the cached password to authenticate the user, allowing them to log in.

Therefore, the correct answer is: option c). The RODC will use the cached password for authentication.

Step-by-step explanation:

When a user attempts to log on and the WAN link to a writable domain controller is not available, if the password for a computer account is cached on a Read-Only Domain Controller (RODC), the RODC will use the cached password for authentication.

This allows users to log in even when the writable domain controller is not reachable, provided that the information is available in its cache. It does not need to contact the writable domain controller over the WAN link, the user will not be prompted to enter a new password, and the user will not be prevented from logging in.

Additionally, when a user account is not cached, the RODC forwards the authentication to a writable Domain Controller which does the authentication. If the Users password is allowed to be cached, then the RODC will pull that through a replication request.