How to find out who reset the DSRM password of domain controller
Hello All,
Hope this post finds you in good health and spirit.
This post is regarding How to find out who reset the DSRM password of domain controller.
How to find out who reset the DSRM password of domain controller
DSRM is Directory Services Restore Mode and its only needed when Active Directory is so damaged that you cannot log on using your normal AD Administrator password.
You can easily find-out who has reset DSRM password for your domain controller by checking the security logs. Please open the event viewer on domain controller and go to security logs.
Right click on security logs and Filter the 4794 event id that show attempt made to set the directory services restore mode.
[4794 event id is related to DSRM password reset]Click on OK
Now you see who has reset the DSRM password and when it was.
So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!
Recommended contents
How to Check the Active Directory Database Integrity
Disabling and Enabling the Outbound Replication
DFS Replication Service Stopped Replication
What is Strict Replication Consistency
The replication operation failed because of a schema mismatch between the servers involved
Troubleshooting ad replication error 8418 the replication operation failed because of a schema mismatch between the servers
How to export replication information in txt file
Repadmin Replsummary
Enabling the outbound replication
Disabling and enabling replication on schema master domain controller
How to enable strict replication consistency
How to prevent lingering objects replication in active directory
AD replication process overview
How to force active directory replication
Change notification in replication process
How to check replication partner for a specific domain controller
dcdiag test replications
DFS Replication Event
Unidirectional replication
So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!
Guys please don’t forget to like and share the post.Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them .
You can also share the feedback on below windows techno email id.
If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.