RE: [ActiveDir] Resetting the DSRM password (w2k and w2k3)

[Jorge de Almeida Pinto]

Title: Resetting the DSRM password (w2k and w2k3)

Hi Neil,

 

If you use a remote tool to execute the command...
First determine the OS (e.g. through WMI) and then run the remote tool with the correct command line

 

A remote tool that could be usefull in this is PSEXEC from PSTOOLS from SYSINTERNALS as this one does not need a server component

 

Cheers
#JORGE#

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil
Sent: Tuesday, May 03, 2005 12:30
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Resetting the DSRM password (w2k and w2k3)

Some time ago, I wrote a batch file to reset the DSRM password on all DCs in a domain to some string, which is then executed every n days. The script uses setpwd to change the pw and works fine on w2k sp3 DCs.

I am now in the throws of testing a w2k and w2k3 mixed (DC) environment and looking for issues which may arise in such a mixed env. Setpwd appears to be one such issue since setpwd does not function from w2k to w2k3 DCs and the new ntdsutil option to 'reset DSRM password'  does not function from w2k3 to w2k DCs.

Is there a newer version of setpwd which works cross platform?
Is the above a known issue? Must I use setpwd for w2k DCs and ntdsutil for w2k3 DCs?
Any further comments or feedback from those that have encountered this issue?

Thanks,
neil

==============================================================================
This message is for the sole use of the intended recipient. If you received this message in error please delete it and notify us. If this message was misdirected, CSFB does not waive any confidentiality or privilege. CSFB retains and monitors electronic communications sent through its network. Instructions transmitted over this system are not binding on CSFB until they are confirmed by us. Message transmission is not guaranteed to be secure.
==============================================================================

This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.