3.1.6 Other Local Events

A server in the Active Directory forest MUST update its Server Configuration object and set of root key objects when the corresponding objects on the Active Directory DC are modified, either because of changes by an authorized user or as the result of Active Directory replication.