From: "Geo" 

Oh Ok, I got it now (it's been so long) if the pdc is down you just promote
a bdc so people can get on about their business.

Geo.

"John Cuccia"  wrote in message
news:4bad21p8mfil13i0tbnba6qih8bdsja1ak{at}4ax.com...

> Users can't change passwords without a connection to the PDC (I'm not
> sure what happens when they try):
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;266729
> The major role that Netlogon plays on domain controllers is in SAM
> synchronization. Only the PDC has a writeable copy of the SAM (with
> the exception of Last Logon Time), and all changes that are made to
> the SAM need to be written to the BDCs. Any change to a user, group,
> machine account, trust, and so on, is recorded on the PDC.
>
>
>
> According to this article, only a few pieces of info are sent
> "upstream" in an NT4 domain.  It mentions user lockouts and trust
> account password changes in particular.  It also says that password
> changes happen on the PDC.
> http://support.microsoft.com/kb/185952/EN-US/

--- BBBS/NT v4.01 Flag-5