2.2.5 Forwarding Password-Change Request Messages
When an RODC receives a SamrOemChangePasswordUser2 or a SamrUnicodeChangePasswordUser2 request, as specified in [MS-SAMR] sections 3.1.5.10.2 and 3.1.5.10.3, the request MUST be forwarded to a writable NC replica. The way in which these messages are forwarded is specified in section 3.3.5.5.