This command allows an admin to view or modify the password replication policy for RODCs. /prp ADDITIONAL_ARGS can be either ...

This command allows an admin to view or modify the password 
     replication policy for RODCs.

     /prp   [ADDITIONAL_ARGS]

      can be either of
          view
          add
          delete
          move
     for view, add, and delete,  can be either of
          rodc_name
          *
     for move,  is
          rodc_name
     [ADDITIONAL_ARGS] depend on 
     view:
     This operation displays the principals in the specified list or 
     displays the current password replication policy for a specified 
     principal.
     
     /prp view  {|}
     
      is either of
          auth2 - the list of security principals which have been 
               authenticated by the RODC 
          allow - security principals (or groups of security 
               principals) for which the RODC is explicitly allowed 
               to replicate passwords.
          deny - the list of security principals (or groups of security 
               principals) for which RODC is explicitly denied 
               permission to replicate passwords.
          reveal - the list of security principals (users and computers) 
               which have their current password cached by the RODC 
          The allow and deny lists typically contain groups - direct 
          or nested membership of any of the groups implies 
          membership of the relevant "list".
     add:
     This operation adds the specified principal to the allow list.
     
     /prp add  allow 

     delete:
     This operation deletes the specified principal (or all principals) 
     from the auth2/allow list.

     /prp delete  allow {|/all}
     /prp delete  auth2 /all

     move:
     This operation moves all the principals from the auth2 list to 
     the specified group. If the group does not exist, it is created. 
     If the group is not in the allow list of the RODC, it is added.

     /prp move   [/noauth2cleanup] 
          [/users_only|/comps_only]
     /noauth2cleanup - The auth2 list will be cleaned up by default 
          when using the move operation. Use this switch to avoid the 
          cleanup.
     /users_only - Only user objects will be moved from the auth2 
          list to the allow list.
     /comps_only - Only computer objects will be moved from the 
          auth2 list to the allow list.