We recommend that read-only domain controllers be configured to cache credentials for the domain user who is administering ...