6.1.1.6.13 Read-Only Domain Controllers

name: Read-Only Domain Controllers

objectClass: group

RID: 521

groupType: {GROUP_TYPE_ACCOUNT_GROUP | GROUP_TYPE_SECURITY_ENABLED}

This group is created in a domain by the PDC the first time a Windows Server 2008 operating system or later DC holds the PDC FSMO.