Calling DsrUpdateReadOnlyServerDnsRecords

The RODC client MUST do the following to call DsrUpdateReadOnlyServerDnsRecords.

  • Use the secure channel established with a DC in the domain identified by domain-name, and pass its name as the ServerName parameter.<87>

  • Pass the client name as the ComputerName parameter.

  • Pass a valid client Netlogon authenticator as the Authenticator parameter.

After the method returns, the client MUST verify the ReturnAuthenticator, as defined in section