How to make a domain only for user authorization?

Question

Active Directory

The subdomain controller has broken in the remote office. Is it possible to make an additional domain controller only for user authorization and policy enforcement, so that its synchronization occurs only from the central office and not vice versa? So that, even when killing everything on the DC of the remote office, this does not lead to damage to the contents of AD as a whole.

Answer 1

A read-only domain controller (RODC) is a new type of domain controller in the Windows Server® 2008 operating system. With an RODC, organizations can easily deploy a domain controller in locations where physical security cannot be guaranteed. An RODC hosts read-only partitions of the Active Directory® Domain Services (AD DS) database.