Restartable AD DS and DSRM Logon Behaviors

re: Restartable AD DS and DSRM Logon Behaviors

grinder — Tue, 27 Jan 2009 19:23:15 GMT

On technet.microsoft.com/.../cc732714.aspx another options for DSRMAdminLogonBehavior

0 (default for Windows Server 2008) - The DSRM Administrator account cannot be used to log on.

You can only log on to the domain controller with a domain account. This requires an additional domain controller to authenticate the request and working connectivity, name resolution, authentication, and authorization between the local domain controller and the authenticating domain controller.

1 - The DSRM Administrator account can be used to log on only when the AD DS service is stopped.

This value can improve functionality by allowing more options for logging on to a domain controller. However, keep in mind that the DSRM Administrator account password is not checked against any password policy.

You might change the entry to this value in a domain that has a single domain controller, or on a domain controller that is on an isolated network, or on one that points to itself or other offline domain controllers exclusively for name resolution.

2 - The DSRM Administrator account can be used to log on at any time. Using this value is not recommended because the DSRM Administrator account password is not checked against any password policy.

re: Restartable AD DS and DSRM Logon Behaviors

grinder — Tue, 27 Jan 2009 18:58:10 GMT

Very thanks for Instructions.

re: Restartable AD DS and DSRM Logon Behaviors

BrianM — Wed, 22 Oct 2008 20:49:29 GMT

That is what I get for posting way to early in the morning for me. :)

re: Restartable AD DS and DSRM Logon Behaviors

GrammarGuy — Wed, 22 Oct 2008 19:41:48 GMT

Nice post - but please check your spelling and grammar before you post.

Examples from your post above:

...where removed. (were)

Although it hasn’t been as easy as hitting CTRL-Z to undo a mistakenly deleted object or to try to restore from the Recycle Bin. (Poor sentence structure).

...now functions as service. (as a service)

...in a norm state. (normal)

Value 0 had to big of an impact (too)

...a little to liberal for my likings (too)

...when you want to all the DRSM (allow)