Preventing LAN users from accessing RODC

[Wardrop1990]

We recently deployed a RODC in our DMZ for use with RDS. The problem now is that some workstation are choosing the RODC as their DC, and trying to pull group policy and what not from it. This is currently blocked by our firewall, so group policy processing fails in these instances.

How do I tell all of our LAN devices to NOT use the RODC, but obviously still have servers in the DMZ access it?

Thanks

Continue reading...