INTRODUCTION
On a Windows-based domain controller, you may want to synchronize the Directory Service Restore Mode (DSRM) Administrator password with a domain user account. In Windows Server 2003, you cannot do this. For Windows Server 2008, a feature is available that lets you synchronize the DSRM Administrator password with a domain user account.
More Information
Update information
Download the Update for Windows Server 2008 (KB961320) package now.Download the Update for Windows Server 2008 x64 Edition (KB961320) package now.Download the Update for Windows Vista (KB961320) package now.Download the Update for Windows Vista for x64-based Systems (KB961320) package now. For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
The following files are available for download from the Microsoft Download Center:119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Feature information
A supported feature that modifies the product's default behavior is now available from Microsoft. However, it is intended to modify only the behavior that this article describes. Apply it only to systems that specifically require it. This feature may receive additional testing. Therefore, if the system is not severely affected by the lack of this feature, we recommend that you wait for the next software update that contains this feature.
To obtain this feature immediately, contact Microsoft Customer Support Services. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:http://support.microsoft.com/contactus/?ws=support
Prerequisites
To apply this feature, you must be running Windows Server 2008 on the computer.
Restart requirement
You must restart the computer after you apply this feature.
Feature replacement information
This feature does not replace any other updates.
How to synchronize the DSRM Administrator password on a Windows Server 2008-based domain controller with the password of a domain user account
After you apply this feature, you can synchronize the DSRM Administrator password on a Windows Server 2008-based domain controller with the password of a domain user account. To do this, run the following command on the Windows Server 2008-based domain controller:
ntdsutil "set dsrm password" "sync from domain account <AccountName>" q qNote In this command, <AccountName> is a placeholder for the name of the domain user account that you want to use.
This command synchronizes the DSRM Administrator password one time. If you want to perform another synchronization, you must run this command again.File information
The English version of this feature has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2008 notes
The .manifest files and the .mum files that are installed in each environment are listed separately in the "Additional file information for Windows Server 2008" section. These files and their associated .cat (security catalog) files are critical to maintaining the state of the updated component. The .cat files are signed with a Microsoft digital signature. The attributes of these security files are not listed.
For all supported x86-based versions of Windows Server 2008
File name |
File version |
File size |
Date |
Time |
Platform |
---|---|---|---|---|---|
Ntdsutil.exe.mui |
6.0.6001.22348 |
110,592 |
08-Jan-2009 |
04:57 |
Not applicable |
Ntdsutil.exe |
6.0.6001.22348 |
374,272 |
08-Jan-2009 |
02:38 |
x86 |
Ntdsa.mof |
Not applicable |
227,725 |
18-Dec-2007 |
21:02 |
Not applicable |
Ntdsai.dll |
6.0.6001.22348 |
1,950,720 |
08-Jan-2009 |
04:58 |
x86 |
Samlib.dll |
6.0.6001.22348 |
57,856 |
08-Jan-2009 |
04:59 |
x86 |
Samsrv.dll |
6.0.6001.22348 |
480,768 |
08-Jan-2009 |
04:59 |
x86 |
Samsrv.mof |
Not applicable |
61,288 |
18-Dec-2007 |
21:02 |
Not applicable |
For all supported x64-based versions of Windows Server 2008
File name |
File version |
File size |
Date |
Time |
Platform |
---|---|---|---|---|---|
Ntdsutil.exe.mui |
6.0.6001.22348 |
100,352 |
08-Jan-2009 |
05:16 |
Not applicable |
Ntdsutil.exe |
6.0.6001.22348 |
466,944 |
08-Jan-2009 |
03:08 |
x64 |
Ntdsa.mof |
Not applicable |
227,725 |
18-Dec-2007 |
21:03 |
Not applicable |
Ntdsai.dll |
6.0.6001.22348 |
2,634,752 |
08-Jan-2009 |
05:16 |
x64 |
Samlib.dll |
6.0.6001.22348 |
99,328 |
08-Jan-2009 |
05:17 |
x64 |
Samsrv.dll |
6.0.6001.22348 |
671,744 |
08-Jan-2009 |
05:17 |
x64 |
Samsrv.mof |
Not applicable |
61,288 |
18-Dec-2007 |
21:03 |
Not applicable |
Samlib.dll |
6.0.6001.22348 |
57,856 |
08-Jan-2009 |
04:59 |
x86 |
Samsrv.mof |
Not applicable |
61,288 |
18-Dec-2007 |
21:02 |
Not applicable |
Additional file information for Windows Server 2008
Additional files for all supported x86-based versions of Windows Server 2008
File name |
Package_for_kb961320_client_1~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
10,707 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_client~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,432 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_sc_0~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
38,642 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_sc~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,424 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_server_0~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
39,035 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_server~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,432 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_winpesrv_0~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,422 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_winpesrv~31bf3856ad364e35~x86~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,431 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
X86_microsoft-windows-d..-ntdsutil.resources_31bf3856ad364e35_6.0.6001.22348_en-us_7229f6c74eb00d9b.manifest |
File version |
Not applicable |
File size |
2,927 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
05:56 |
Platform |
Not applicable |
File name |
X86_microsoft-windows-d..ommandline-ntdsutil_31bf3856ad364e35_6.0.6001.22348_none_dbb77bb148ca30b2.manifest |
File version |
Not applicable |
File size |
8,606 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
05:58 |
Platform |
Not applicable |
File name |
X86_microsoft-windows-d..toryservices-ntdsai_31bf3856ad364e35_6.0.6001.22348_none_f12ca523d2599933.manifest |
File version |
Not applicable |
File size |
12,574 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
06:02 |
Platform |
Not applicable |
File name |
X86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_b254bc94ba2b62f8.manifest |
File version |
Not applicable |
File size |
96,188 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
06:03 |
Platform |
Not applicable |
Additional files for all supported x64-based versions of Windows Server 2008
File name |
Amd64_microsoft-windows-d..-ntdsutil.resources_31bf3856ad364e35_6.0.6001.22348_en-us_ce48924b070d7ed1.manifest |
File version |
Not applicable |
File size |
2,929 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
06:45 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..ommandline-ntdsutil_31bf3856ad364e35_6.0.6001.22348_none_37d617350127a1e8.manifest |
File version |
Not applicable |
File size |
8,644 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
07:31 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..toryservices-ntdsai_31bf3856ad364e35_6.0.6001.22348_none_4d4b40a78ab70a69.manifest |
File version |
Not applicable |
File size |
12,632 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
07:35 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_0e7358187288d42e.manifest |
File version |
Not applicable |
File size |
96,227 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
07:35 |
Platform |
Not applicable |
File name |
Package_for_kb961320_client_1~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
10,101 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_client~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,440 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_sc_0~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
44,004 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_sc~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,432 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_server_0~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
44,682 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_server~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,440 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_winpesrv_0~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,430 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Package_for_kb961320_winpesrv~31bf3856ad364e35~amd64~~6.0.2.0.mum |
File version |
Not applicable |
File size |
1,439 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
18:18 |
Platform |
Not applicable |
File name |
Wow64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_18c8026aa6e99629.manifest |
File version |
Not applicable |
File size |
92,241 |
Date (UTC) |
08-Jan-2009 |
Time (UTC) |
05:20 |
Platform |
Not applicable |
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates