Access Control Lists (ACLs) are those settings that define who gets access to which objects, along with the type of access in Active Directory. These settings are called Access Control Entries (ACEs), and they are also useful in enabling auditing object accesses.
Domain functional level (DFL) determines the features of a Domain Controller (DC) based on the Windows server Operating System (OS) it runs on. Feature set of a particular DFL will be available for a DC if it runs on the operating system version that is compatible with the functional level. Note that, the OS version constraint is only for the domain controller and not applicable for the member servers or the workstations in the domain. Read more
A read only domain controller (RODC) is a type of domain controller that has read-only partitions of Active Directory Domain Services (AD DS) database. RODC is available in Windows server 2008 OS and in its succeeding versions. Enterprises tend to deploy RODC under two conditions viz.,