Friday, April 10, 2009

Automated Maintenance of Directory Service Restore Mode Password

With Windows Server 2008 SP2 or SP1/RTM with hotfix KB961320 you can make administration of the DSRM password completely automatic. The approach is this: You create an unprivileged account in Active Directory, set the password and using a scheduled task you execute the new sync from domain account xxxx command.

This nice approach is documented in the Directory Services blog. Read the complete story here.

No comments: