I had TKDC as AD for a while. So far so good. Now I want to deploy a second TKDC as a read-only domain controller. Is there any guide/doc on this? I was stuck at kinit: Cannot find KDC for realm "MY.DOMAIN" while getting initial credentials when trying to simply add a second instance to the domain. Perhaps I could resolve this issue, but that leaves me with a question: "Am I even on the right way?" Will there be an option for RODC later? So here I am, looking for help/advice.