Re: Re: Directory Services program manager interviews

Joey — Wed, 18 Jun 2008 23:26:17 GMT

Hey IT Pro,

I forwarded your question to one of our DS guys and here is his reply (thanks Gregoire!)

"There is a DSRM account per domain controller (RODC included), which is a local account (in the registry, not in AD).

Note that the DSRM account, and therefore the DSRM password, is different on every domain controller, so if a hacker manages to get the DSRM password of an RODC, only this RODC is compromised."

Hope this helps.

Joey

Re: Directory Services program manager interviews

itprofessional — Wed, 11 Jun 2008 06:07:51 GMT

I would like to know if the Directory Services Restore Mode password is cached anywhere on a Read Only Domain Controller? The question was asked today at TechEd and the answer from the Senior Program Manager was "I don't know."

Comment Feed for Directory Services program manager interviews (Perimeter on TechNet Edge)

Re: Re: Directory Services program manager interviews

Re: Directory Services program manager interviews