Hi All,
In my AD environment, there are 2x domains. One is Domain A (Parent Domain), the other is Domain B (Child Domain).
I have a writable domain controller for each of these domains in production network and one RODC for Domain A in DMZ. Now, there is an application need to be deployed in DMZ to reset domain user account password in Domain B.
My question is that is it possible for RODC of Domain A in DMZ forward back the password reset request to child domain DC in production network?
I have do a test to log on a DMZ application server (joined to Domain A) as Domain B user and reset password. I can log on the server, but failed to reset the password with error "Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied.".
Can someone please help? Thanks in advance.
Ted