2008 r2 RODC correctly setup and replication is good. User's computers and user accounts verified as cached in the RODC. Logonserver (set l) is verified to be the RODC on the client machine. DNS, GC, sysvol on RODC looking good. Client primary DNS is RODC. All things considered everything appears to be setup correctly, however when I run a gpupdate /force on a client in this branch site, it immediately goes ldap 389 to datacenter RWDC at a diff site and downloads about 11mb of policy updates. Not cool :(
.....
At another branch site that does not have a RODC, but rather a RWDC, clients get their gp's directly from their local RWDC no problem.
Does RODC dish out gpupdates for local clients cached on them?
-Chad