RODC filtered attribute set

A dynamically configured set of attributes that are not replicated to a read-only domain controller (RODC). This prevents those attribute values from being revealed if an RODC is compromised.