Pop Quiz: Synchronizing DSRM Passwords on Windows Server 2008 R2
Applies to the "Maintaining the Active Directory Environment" objective of Exam 70-640: Windows Server 2008, Server Administrator.
Q: A company's server administrator needs to synchronize the DSRM password of all Windows Server 2008 R2 domain controllers with a newly created DSRM domain account. Which command tool should the administrator use?
- Non-Authoritative Restore
- Authoritative Restore
Answer and explanation is below.
Answer is C: The Ntdsutil command can be used to synchronize the DSRM (Directory Services Restore Mode) password to a domain account using the parameter Sync from domain account %s.
Quick Tip: Create a GPP (Group Policy Preference) scheduled task to automate the synchronization of the DSRM password for all domain controllers.
Bonus Question: Which Windows Server 2008 R2 role needs to be installed to provide customizable services for creating and managing public key certificates used in software security systems employing public key technologies? (Tweet your answer with #pop640b and get a chance to win a rare MCPmag.com baseball cap! Deadline for entries is Monday, October 1.)
Answer to bonus question from last time: The Windows Server 2008 OOBE.exe command can be used to recall the Initial Configuration Tasks window after selecting Do no show this window at logon check box.
Andy Barkl, CCNP, CCDP, CISSP, MCT, MVP, MCDST, MCSE: Security, MCSA: Security, MCSA: Messaging A+, CTT+, i-Net+, Network+, Security+, Server+, CNA, has over 20 years of experience in the IT field. He's the owner of MCT & Associates LLC, a technical training and consulting firm in Phoenix, Arizona. He enjoys dividing his time between teaching in the classroom, writing from his office and consulting on Cisco and Windows deployments. He's also the online editor for MCPMag.com, TCPMag.com, CertCities.com, and a contributing author and editor for Sybex and Cisco Press. He hosts a multitude of exam preparation chats monthly on MCPmag.com and CertCities.com.