How can I
change the Recovery Console or Directory
Restore Safe Mode Administrator password
on a Domain Controller?
When you
promote a Windows 2000 or Windows Server
2003 Server-based computer to a domain
controller, you are prompted to type a
Directory Service Restore Mode
Administrator password. This password is
also used by Recovery Console, and is
separate from the Administrator password
that is stored in Active Directory after
a completed promotion.
The
Administrator password that you use when
you start Recovery Console or when you
press F8 to start Directory Service
Restore Mode is stored in the
registry-based Security Accounts Manager
(SAM) on the local computer. The SAM is
located in the
%SystemRoot%\System32\Config folder. The
SAM-based account and password are
computer specific and they are not
replicated to other domain controllers
in the domain.
For ease
of administration of domain controllers
or for additional security measures, you
can change the Administrator password
for the local SAM. To change the local
Administrator password that you use when
you start Recovery Console or when you
start Directory Service Restore Mode,
use one of the following methods: |