3.2.4.4 PasswordUpdateForward Request
This message is used to communicate a request to change the state of a password for a directory entry. This message MUST be triggered only at an RODC by receipt of a NetrServerPasswordSet or NetrServerPasswordSet2 message, as specified in [MS-NRPC] sections 3.5.4.4.6 and 3.5.4.4.5, with AccountType of WorkstationSecureChannel, ServerSecureChannel, or CdcServerSecureChannel. The message is sent to the DC with which the RODC has established its secure channel, as specified in [MS-NRPC]. If the forwarding operation returns an error, the operation fails and the error MUST be propagated back to the client that originated the password update request.