Registry key to tell if a server is a Read Only Domain Controller

Question

Is there a registry key I can check to tell if a server is a read only domain controller?

Can I rely on using HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\EnableRSOForRODC set to TRUE? — Ben Hamilton, Oct 19 '11 at 00:07

score 1 · Answer 1 · answered Oct 20 '11 at 00:27

I've now got a code snippet to check if the EnableRSOForRODC key exists, and if it does, returns it value.

1>NUL: 2>NUL: REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v "EnableRSOFor‌RODC" || @Goto NoRODCExists
FOR /F "tokens=3 skip=1 " %%G IN ('REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v "EnableRSOFor‌RODC"') DO (Echo Read Only Domain Controller? %%G.)
:NoRODCExists

score 0 · Answer 2 · answered Oct 19 '11 at 07:36

0

As far as i know EnableRSOForRODC works...

answered Oct 19 '11 at 07:36

dfc

1,331
8
16

Thanks dfc, I'll move forward with checking that key. If I find a case where it doesn't work I'll update here. – Ben Hamilton Oct 20 '11 at 00:13

Registry key to tell if a server is a Read Only Domain Controller

2 Answers2