Domain controller (RODC) write permissions?

Question

Computer networks

Hello, tell a beginner, deployed windows server 2008r2 standart (primary domain controller) as well as RODC (read-only controller) so that's the question why can I create and edit active directory objects on a read-only controller (RODC)? in fact, it should read all the changes from the main controller, but not allow (forbid) to write? Or is it because I logged in under the domain administrator account on this controller (RODC) please explain, thanks in advance!

Answer 1

You create objects not on the RODC, the rest clings to one of the DCs, by default to the PDC Emulator.
PS You are aware that Server 2008 is already out of life?