Active Directory Administration Cookbook

How it works...

When the Active Directory Domain Service service is not running, or the domain controller is non-functional, you'll need a way to log on to the domain controller. As the Active Directory database is not available, a special password is maintained for the domain controller-local built-in Administrator account.

When a Windows Server-based member server is promoted to a domain controller, this password is configured as the DSRM Administrator password.

The password can be managed in two ways:

• The manual reset scenario
• The domain account password sync scenario

In the first scenario, the password is set manually per domain controller and then to be documented in a password vault.

In the second scenario, the domain controller ...