[Samba] msDS-NC-Replica-Location attribute realisation

[Omnis ludis - games]

Good afternoon, please tell me I wanted to know about the implementation of
the msDS-NC-Replica-Location attribute, NTDS server settings are recorded
there, but for example we have a domain test.com a subdomain is being
created in it one.test.com and we create a second domain controller in the
subdomain and enter the Administrator credentials from the subdomain, but
this attribute is editable only by the main administrator from the domain
test.com the question is, how was this implemented in windows, do they
somehow transfer the credentials of the main administrator during the input
to the subdomain of the second controller?