We have second thoughts about adding the ms-Mcs-AdmPwd attribute to a RODC because of it being stored clear text. Will omitting the attribute from the RODC affect LAPS working properly? Will LAPS just look for one of our other DCs instead?
↧