首先我们在Sea-DC1（此计算机为一台Windows Server 2008的域控制器）上进行RODC安装的活动目录准备工作。插入Windows Server 2008的安装光盘。进入\Sources\adprep目录，执行命令adprep /rodcprep，如下图（1）、（2）所示。
图（1）
图（2）
注：此命令将更新森林中所有DNS应用程序目录分区的权限。另
Windwos Server 2008 中经常有物理内存占用较高，但任务管理器中各进程的内存看起来占用并不多情况。这可能是由于OS为保证服务器性能不限制系统缓存，服务器系统长时间执行I/O，系统文件缓存不断占用物理RAM造成，现在通过限制系统缓存大小来解决。具体可使用微软现已免费工具:Windows Dynamic CacheHumm that’s a good question when
Administrative Role Separation on RODCsIt's very common for a branch office DC to be managed by a local server administrator who does everything from running backups on the domain controller to cleaning keyboards. But it is a security risk to grant a remote site administrator the rights necessary to do general maintenance on a domain controller, and the site admin can potentially elevate her privileges in the domain. RODCs provide two kinds of administrative role separation to mitigate this
