The SBS Administrator account which you create during SBS 2011 standard setup is synchronized with the DSRM (Directory Services Restore Mode) account password. That way, if you need to boot in Directory Service Restore mode and perform Active Directory Repair operations you will be able to use the SBS administrator password.
There is a hidden problem though. You might expect that when you change the SBS administrator account password, it will be automatically synchronized with the underlying DSRM account password. Unfortunately, this is not the case. By default SBS accounts are forced to change password every 180 days and it is quite possible that the original SBS Administrator password (set during the installation process) gets lost in time. As you can guess, this presents a serious problem if you need to boot in DSRM and recover from a problem with Active Directory.
In the following Step-by-Step video tutorial, we will demonstrate two approaches for synchronizing the SBS Administrator account password with DSRM account password. First, you will see how to perform a manual synchronization. Then, we will show you how to use Task Scheduler and automate the whole process.
Testing the result is very important in this case, and we will also demonstrate how to boot and login in DSRM, after a password change.
Stay tuned on NetoMeter – subscribe to NetoMeter RSS.
Dean