Reset the DSRM Administrator Password
Prior to Windows 2003 SP1 the DSRM (Directory Services Restore Mode) password was automatically synchronised with the Domain Administrator account password whenever you changed the domain admin account. With Win2003 SP1 and the breaking of this functionality you will find the below error in your application event log if these two passwords don’t match.
Event Type: Error
Event Source: dsrestor
Event Category: None
Event ID: 1005
Date: 8/03/2009
Time: 2:31:19 PM
User: N/A
Computer: XXXXXXXXX
Description:
The DSRestore Filter failed to connect to local SAM server. Error returned is <id:997>.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
You can safely ignore this error if you know what your DSRM Password is and want to keep them the same across different domain controllers in different domains otherwise you can follow the steps below to change DSRM Password to match the domain administrator account.
To Reset the DSRM Administrator Password
- Click, Start, click Run, type ntdsutil, and then click OK.
- At the Ntdsutil command prompt, type set dsrm password.
- At the DSRM command prompt, type one of the following lines:
- To reset the password on the server on which you are working, type reset password on server null. The null variable assumes that the DSRM password is being reset on the local computer. Type the new password when you are prompted. Note that no characters appear while you type the password.
-or-
- To reset the password for another server, type reset password on server servername, where servername is the DNS name for the server on which you are resetting the DSRM password. Type the new password when you are prompted. Note that no characters appear while you type the password.
- To reset the password on the server on which you are working, type reset password on server null. The null variable assumes that the DSRM password is being reset on the local computer. Type the new password when you are prompted. Note that no characters appear while you type the password.
- At the DSRM command prompt, type q.
- At the Ntdsutil command prompt, type q to exit.
