Hi I want to make sure for below question.

Client connect to Domain Controller A that is not Primary Domain Controller, password replication will take 15 minutes to replication from Domain Controller A to Primary Domain Controller.

Which Domain Controller that should install Password Sync Agent in order to make all native password change (e.g.: password change via Ctrl+Alt+Del screen or password reset by admins in ADUC console) from Domain Controller A instantly update to ADselfservice plus server?