Reference:
To use Authenticated silos, you need a 2012 R2 Domain functional level on the forest.
Their are part of the configuration partition (so, at the forest level), replicated on all domain controllers
https://www.sstic.org/2017/presentation/administration_en_silo/
Videos: