A process in which a read-only domain controller (RODC) is installed in two stages. In the first stage, a highly privileged user, such as a member of the Domain Admins group, creates an account for the RODC. In the second stage, a delegated user attaches the server that will be the RODC to the account that was created for it.