DSRestore Error <ID:997>

I'm getting the DSRestore error event in the logs of my PDC Emulator. I
found the steps to reset the dsrestore password here:

http://support.microsoft.com/kb/322672

My question is, if I follow those instructions and reset the dsrestore
password, will it also reset the administrator account password to match the
dsrestore password?

Hello Andrew,

The DSRM restore mode password has nothing to do with the previous local
administrator, when the DC was workgroup server nor with the domain administrator
account.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I'm getting the DSRestore error event in the logs of my PDC Emulator.
> I found the steps to reset the dsrestore password here:
>
> http://support.microsoft.com/kb/322672
>
> My question is, if I follow those instructions and reset the dsrestore
> password, will it also reset the administrator account password to
> match the dsrestore password?
>

The dsrestore password is not kept in the DIT file, it is kept in the sam
file. Therfore the modification of one has no impact on the other. As a
matter of fact you should make it part of your task list when you change the
domain admin password you change the dsrestore password. They should not be
the same value either.

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Andrew" <> wrote in message
news:...
> I'm getting the DSRestore error event in the logs of my PDC Emulator. I
> found the steps to reset the dsrestore password here:
>
> http://support.microsoft.com/kb/322672
>
> My question is, if I follow those instructions and reset the dsrestore
> password, will it also reset the administrator account password to match
> the dsrestore password?

What do you mean by "Domain Admin" Password? My account is in the "Domain
Admin" group but I wouldn't see how its passowrd would be linked to
DSRestore. Are you referring to the "BuiltIn" Administrator account which
gets added to all the higher admin groups at dcpromo?

"Paul Bergson [MVP-DS]" <> wrote in message
news:...
> The dsrestore password is not kept in the DIT file, it is kept in the sam
> file. Therfore the modification of one has no impact on the other. As a
> matter of fact you should make it part of your task list when you change
> the domain admin password you change the dsrestore password. They should
> not be the same value either.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCITP - Enterprise Administrator
> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
> 2008, Vista, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewGroups. This
> posting is provided "AS IS" with no warranties and confers no rights.
> "Andrew" <> wrote in message
> news:...
>> I'm getting the DSRestore error event in the logs of my PDC Emulator. I
>> found the steps to reset the dsrestore password here:
>>
>> http://support.microsoft.com/kb/322672
>>
>> My question is, if I follow those instructions and reset the dsrestore
>> password, will it also reset the administrator account password to match
>> the dsrestore password?
>
>

Hello Andrew,

The local administrator doesn't exist on domain controllers, as soon as promotion
to DC is done the local SAM database is not longer used. To be able to access
the server without running as domain controller the DSRM administrator account
is the only option to logon. This isn't the local administrator nor the domain
administrator account you will see in ad uc.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> What do you mean by "Domain Admin" Password? My account is in the
> "Domain Admin" group but I wouldn't see how its passowrd would be
> linked to DSRestore. Are you referring to the "BuiltIn" Administrator
> account which gets added to all the higher admin groups at dcpromo?
>
> "Paul Bergson [MVP-DS]" <> wrote in message
> news:...
>
>> The dsrestore password is not kept in the DIT file, it is kept in the
>> sam file. Therfore the modification of one has no impact on the
>> other. As a matter of fact you should make it part of your task list
>> when you change the domain admin password you change the dsrestore
>> password. They should not be the same value either.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCITP - Enterprise Administrator
>> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
>> 2008, Vista, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewGroups.
>> This posting is provided "AS IS" with no warranties and confers no
>> rights. "Andrew" <> wrote in message
>> news:...
>>
>>> I'm getting the DSRestore error event in the logs of my PDC
>>> Emulator. I found the steps to reset the dsrestore password here:
>>>
>>> http://support.microsoft.com/kb/322672
>>>
>>> My question is, if I follow those instructions and reset the
>>> dsrestore password, will it also reset the administrator account
>>> password to match the dsrestore password?
>>>

The administrator account in the domain

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Andrew" <> wrote in message
news:%...
> What do you mean by "Domain Admin" Password? My account is in the "Domain
> Admin" group but I wouldn't see how its passowrd would be linked to
> DSRestore. Are you referring to the "BuiltIn" Administrator account which
> gets added to all the higher admin groups at dcpromo?
>
> "Paul Bergson [MVP-DS]" <> wrote in message
> news:...
>> The dsrestore password is not kept in the DIT file, it is kept in the sam
>> file. Therfore the modification of one has no impact on the other. As a
>> matter of fact you should make it part of your task list when you change
>> the domain admin password you change the dsrestore password. They should
>> not be the same value either.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCITP - Enterprise Administrator
>> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
>> 2008, Vista, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewGroups. This
>> posting is provided "AS IS" with no warranties and confers no rights.
>> "Andrew" <> wrote in message
>> news:...
>>> I'm getting the DSRestore error event in the logs of my PDC Emulator. I
>>> found the steps to reset the dsrestore password here:
>>>
>>> http://support.microsoft.com/kb/322672
>>>
>>> My question is, if I follow those instructions and reset the dsrestore
>>> password, will it also reset the administrator account password to match
>>> the dsrestore password?
>>
>>