I new install RODC. then assign to UserA.
This RODC do not enable DNS and GC.
When I access to RODC via UserA. In ADUC can change DC to RWDC. then UserA can modify "member of".
if ADUC connect to RODC, any user can read-only.
I need to allow UserA access to RODC only.
How can I disable change DC in ADUC for UserA. or disable modify "member of" permission?