3.4.5.1.11 Calling DsrUpdateReadOnlyServerDnsRecords
The RODC client MUST do the following to call DsrUpdateReadOnlyServerDnsRecords.
Use the secure channel established with a DC in the domain identified by domain-name and pass its name as the ServerName parameter.<98>
Pass the client name as the ComputerName parameter.
Pass a valid client Netlogon authenticator as the Authenticator parameter.
After the method returns, the client MUST verify the ReturnAuthenticator, as defined in section 3.1.4.5.