question

rajakumarswamynathan-1755 avatar image
0 Votes"
rajakumarswamynathan-1755 asked DaisyZhou-MSFT commented

Restarting Windows 2016 in DSRM mode

Hi Team,
I have two DC's DC1 and DC2 . On DC1 I took the backup (System state) and would like to restore the same. For restoring I rebooted my m/c windows 2016 in DSRM mode as per this (https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/reset-directory-services-restore-mode-admin-pwd) , before that I have reset my password as per this (https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/reset-directory-services-restore-mode-admin-pwd#:~:text=in%20the%20domain.-,Reset%20the%20DSRM%20administrator%20password,reset%20password%20on%20server%20null).

After restart, I am entering the credential as .\administrator and the DSRM password which I had reset. I am getting Invalid username and password.

Could you please help here what other options I have to try out or debug the same ?

Note:
I have also disabled NLA authetication (Adding domain users did not help so disabled the NLA), otherwise I am getting NLA authentication error.

1) Open Server Manager, go to Local Server
2) Click on the Remote Desktop link
3) Uncheck "Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended)"
4) Click Apply/Ok to apply and save the changes.

Thanks,
Raja

windows-active-directory
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @rajakumarswamynathan-1755,
Would you please tell me how things are going on your side. If you have any questions or concerns about the information I provided, please don't hesitate to let us know.
Thanks for your time and have a nice day!

Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello @rajakumarswamynathan-1755,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
Thameur-BOURBITA avatar image
0 Votes"
Thameur-BOURBITA answered rajakumarswamynathan-1755 commented

Hi,


To reset DSRM password restart your server and run the following command :

 ntdsutil "set dsrm password" "reset password on server NULL"

Then you type the new password :


93956-image.png


93944-image.png



please don't forget to mark hepful reply as answer


image.png (52.1 KiB)
image.png (78.8 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Thameur-BOURBITA Thanks for your response. As said in my initial description, I gave the reset password link where I followed the same as you described above for the reset of password.

But even after that I am getting username and pwd are incorrect.

By any chance the username can be other than .\administrator ?

0 Votes 0 ·
rajakumarswamynathan-1755 avatar image
0 Votes"
rajakumarswamynathan-1755 answered

I synced my domain account and it worked.

ntdsutil "set dsrm password" "sync from domain account Admin1" q q

I logged in as domain/Admin1 with the domain password and it worked.

However I am not sure why the DSRM administrator credentials did not work even after password reset.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered

Hello @rajakumarswamynathan-1755,

Thank you for posting here.

Based on the description "However I am not sure why the DSRM administrator credentials did not work even after password reset.", how did the DSRM administrator credentials not work?

We can use DSRM administrator credentials as below:

1.Enter DSRM: Start->Administrative Tools->System Configuration->Boot tab->Boot options->Safe boot->Active Directory repair->click OK->In the System Configuration->click Restart.
94129-st1.png

2.Logon the DC with DSRM Administrator account (usually, it is ComputerName\Administrator or .\Administrator) and its password.

Tip: in your case, it should be ComputerName\Admin1 or .\Admin1) and its password you reset.


Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.



st1.png (14.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.