Pop Quiz
Pop Quiz: Synchronizing DSRM Passwords on Windows Server 2008 R2
Applies to the "Maintaining the Active Directory Environment" objective of Exam 70-640: Windows Server 2008, Server Administrator.
Q: A company's server administrator needs to synchronize the DSRM password of all Windows Server 2008 R2 domain controllers with a newly created DSRM domain account. Which command tool should the administrator use?
- Non-Authoritative Restore
- Authoritative Restore
- Ntdsutil
- IFM
Answer and explanation is below.
Answer is C: The Ntdsutil command can be used to synchronize the DSRM (Directory Services Restore Mode) password to a domain account using the parameter Sync from domain account %s.
Quick Tip: Create a GPP (Group Policy Preference) scheduled task to automate the synchronization of the DSRM password for all domain controllers.
References:
Bonus Question: Which Windows Server 2008 R2 role needs to be installed to provide customizable services for creating and managing public key certificates used in software security systems employing public key technologies? (Tweet your answer with #pop640b and get a chance to win a rare MCPmag.com baseball cap! Deadline for entries is Monday, October 1.)
Answer to bonus question from last time: The Windows Server 2008 OOBE.exe command can be used to recall the Initial Configuration Tasks window after selecting Do no show this window at logon check box.
About the Author
Andy Barkl, MCT/MCITP/MCSA, A+, Network+, Security+, CCNA has been studying technology for 30 years. Of the last 15 years, he has spent much of his time parting the knowledge and experience he has gained through IT exams, over 300, to help others be prepared and successful. He teaches classes in Phoenix, Ariz. where he has lived most of his life. He can be reached by e-mail at [email protected].