cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

Unfortunately for this feature to work an RODC is required. Starting from windows server 2012 (or maybe even 2008) the password hashes are not readable from an AD joined server and not even on the domaincontroller itself - even obviously the password hashes are available there. The only way to read these hashes is on an RODC.

(I received this answer from PaloAlto Support)

Who rated this post