A feature is available for Windows Server 2008 that lets you synchronize the DSRM Administrator password with a domain user account

Work anywhere from any device with Microsoft 365

Upgrade to Microsoft 365 to work anywhere with the latest features and updates.

Upgrade now

INTRODUCTION

On a Windows-based domain controller, you may want to synchronize the Directory Service Restore Mode (DSRM) Administrator password with a domain user account. In Windows Server 2003, you cannot do this. For Windows Server 2008, a feature is available that lets you synchronize the DSRM Administrator password with a domain user account.

More Information

Update information


The following files are available for download from the Microsoft Download Center:

Download Download the Update for Windows Server 2008 (KB961320) package now.

Download Download the Update for Windows Server 2008 x64 Edition (KB961320) package now.

Download Download the Update for Windows Vista (KB961320) package now.

Download Download the Update for Windows Vista for x64-based Systems (KB961320) package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Feature information

A supported feature that modifies the product's default behavior is now available from Microsoft. However, it is intended to modify only the behavior that this article describes. Apply it only to systems that specifically require it. This feature may receive additional testing. Therefore, if the system is not severely affected by the lack of this feature, we recommend that you wait for the next software update that contains this feature.

To obtain this feature immediately, contact Microsoft Customer Support Services. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Prerequisites

To apply this feature, you must be running Windows Server 2008 on the computer.

Restart requirement

You must restart the computer after you apply this feature.

Feature replacement information

This feature does not replace any other updates.

How to synchronize the DSRM Administrator password on a Windows Server 2008-based domain controller with the password of a domain user account

After you apply this feature, you can synchronize the DSRM Administrator password on a Windows Server 2008-based domain controller with the password of a domain user account. To do this, run the following command on the Windows Server 2008-based domain controller:

ntdsutil "set dsrm password" "sync from domain account <AccountName>" q qNote In this command, <AccountName> is a placeholder for the name of the domain user account that you want to use.

This command synchronizes the DSRM Administrator password one time. If you want to perform another synchronization, you must run this command again.

File information

The English version of this feature has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Server 2008 notes


The .manifest files and the .mum files that are installed in each environment are listed separately in the "Additional file information for Windows Server 2008" section. These files and their associated .cat (security catalog) files are critical to maintaining the state of the updated component. The .cat files are signed with a Microsoft digital signature. The attributes of these security files are not listed.

For all supported x86-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Ntdsutil.exe.mui

6.0.6001.22348

110,592

08-Jan-2009

04:57

Not applicable

Ntdsutil.exe

6.0.6001.22348

374,272

08-Jan-2009

02:38

x86

Ntdsa.mof

Not applicable

227,725

18-Dec-2007

21:02

Not applicable

Ntdsai.dll

6.0.6001.22348

1,950,720

08-Jan-2009

04:58

x86

Samlib.dll

6.0.6001.22348

57,856

08-Jan-2009

04:59

x86

Samsrv.dll

6.0.6001.22348

480,768

08-Jan-2009

04:59

x86

Samsrv.mof

Not applicable

61,288

18-Dec-2007

21:02

Not applicable

For all supported x64-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Ntdsutil.exe.mui

6.0.6001.22348

100,352

08-Jan-2009

05:16

Not applicable

Ntdsutil.exe

6.0.6001.22348

466,944

08-Jan-2009

03:08

x64

Ntdsa.mof

Not applicable

227,725

18-Dec-2007

21:03

Not applicable

Ntdsai.dll

6.0.6001.22348

2,634,752

08-Jan-2009

05:16

x64

Samlib.dll

6.0.6001.22348

99,328

08-Jan-2009

05:17

x64

Samsrv.dll

6.0.6001.22348

671,744

08-Jan-2009

05:17

x64

Samsrv.mof

Not applicable

61,288

18-Dec-2007

21:03

Not applicable

Samlib.dll

6.0.6001.22348

57,856

08-Jan-2009

04:59

x86

Samsrv.mof

Not applicable

61,288

18-Dec-2007

21:02

Not applicable

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

File name

Package_for_kb961320_client_1~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

10,707

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_client~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

1,432

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_sc_0~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

38,642

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_sc~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

1,424

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_server_0~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

39,035

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_server~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

1,432

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_winpesrv_0~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

1,422

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_winpesrv~31bf3856ad364e35~x86~~6.0.2.0.mum

File version

Not applicable

File size

1,431

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

X86_microsoft-windows-d..-ntdsutil.resources_31bf3856ad364e35_6.0.6001.22348_en-us_7229f6c74eb00d9b.manifest

File version

Not applicable

File size

2,927

Date (UTC)

08-Jan-2009

Time (UTC)

05:56

Platform

Not applicable

File name

X86_microsoft-windows-d..ommandline-ntdsutil_31bf3856ad364e35_6.0.6001.22348_none_dbb77bb148ca30b2.manifest

File version

Not applicable

File size

8,606

Date (UTC)

08-Jan-2009

Time (UTC)

05:58

Platform

Not applicable

File name

X86_microsoft-windows-d..toryservices-ntdsai_31bf3856ad364e35_6.0.6001.22348_none_f12ca523d2599933.manifest

File version

Not applicable

File size

12,574

Date (UTC)

08-Jan-2009

Time (UTC)

06:02

Platform

Not applicable

File name

X86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_b254bc94ba2b62f8.manifest

File version

Not applicable

File size

96,188

Date (UTC)

08-Jan-2009

Time (UTC)

06:03

Platform

Not applicable

Additional files for all supported x64-based versions of Windows Server 2008

File name

Amd64_microsoft-windows-d..-ntdsutil.resources_31bf3856ad364e35_6.0.6001.22348_en-us_ce48924b070d7ed1.manifest

File version

Not applicable

File size

2,929

Date (UTC)

08-Jan-2009

Time (UTC)

06:45

Platform

Not applicable

File name

Amd64_microsoft-windows-d..ommandline-ntdsutil_31bf3856ad364e35_6.0.6001.22348_none_37d617350127a1e8.manifest

File version

Not applicable

File size

8,644

Date (UTC)

08-Jan-2009

Time (UTC)

07:31

Platform

Not applicable

File name

Amd64_microsoft-windows-d..toryservices-ntdsai_31bf3856ad364e35_6.0.6001.22348_none_4d4b40a78ab70a69.manifest

File version

Not applicable

File size

12,632

Date (UTC)

08-Jan-2009

Time (UTC)

07:35

Platform

Not applicable

File name

Amd64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_0e7358187288d42e.manifest

File version

Not applicable

File size

96,227

Date (UTC)

08-Jan-2009

Time (UTC)

07:35

Platform

Not applicable

File name

Package_for_kb961320_client_1~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

10,101

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_client~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

1,440

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_sc_0~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

44,004

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_sc~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

1,432

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_server_0~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

44,682

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_server~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

1,440

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_winpesrv_0~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

1,430

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Package_for_kb961320_winpesrv~31bf3856ad364e35~amd64~~6.0.2.0.mum

File version

Not applicable

File size

1,439

Date (UTC)

08-Jan-2009

Time (UTC)

18:18

Platform

Not applicable

File name

Wow64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.22348_none_18c8026aa6e99629.manifest

File version

Not applicable

File size

92,241

Date (UTC)

08-Jan-2009

Time (UTC)

05:20

Platform

Not applicable

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×