/PasswordReplicationAllowed:{"security_principal" | None} Specifies the names of user, group, and computer accounts whose ...

/PasswordReplicationAllowed:{"security_principal" | None}
Specifies the names of user, group, and computer accounts whose passwords can be replicated to this RODC. Specify "None" if you want to keep the value empty. By default, only the Allowed RODC Password Replication Group is allowed, and it is originally created empty.