3.4.5.4.4 Calling NetrDatabaseRedo
The client calling this method MUST be a backup domain controller (BDC). The client MUST do the following:
Pass a valid PDC name as the PrimaryName parameter.
Pass the client BDC name as the ComputerName parameter.
Pass a valid client Netlogon authenticator as the Authenticator parameter.
Pass a valid single account object information request message as defined in the CHANGELOG_ENTRY structure in section 3.5.4.6.4.
Pass the size of the single account object information request message as the ChangeLogEntrySize parameter.
On receiving STATUS_ACCESS_DENIED, the client SHOULD<123> reestablish the secure channel with the domain controller.