Directory Service Restore Mode on Core
-
Friday, May 04, 2012 4:42 PM
On Server Core how do I tell that I have actually booted in Directory Service Restore Mode?
I have used
bcdedit /set safeboot dsrepair
and rebooted, but ntds service is still running, and it did not ask for the DSRM password, which makes me think that I am not in DSR mode.
On Server Core we have no graphical interface that tells us "You are in Directory Restore Mode". Is there a registry entry or whatever to verify which mode the server is in?
All Replies
-
Monday, May 07, 2012 7:44 AMModerator
Hi,
To stop the service, you can run the net stop ntds command or you can restart the domain controller in Directory Services Restore Mode (DSRM).
Use either of the following two methods to start the domain controller in DSRM. If you use the Bcdedit.exe command-line tool to have the server restart in DSRM, you must use Bcdedit.exe to restart the server normally after you complete the recovery operation. Members of the Backup Operators group might not be able to use the Bcdedit.exe command-line tool to have the server restart in DSRM.
Method 1: Press F8 to restart in DSRM.
===============================
1. Restart the domain controller.Some computers might require you to shut down the computer, rather than restart it, to see the option to start the domain controller in DSRM.
2. After the boot option menu appears, press F8 to start the domain controller in DSRM.
3. When the recovery options menu appears, select the option for DSRM.
Method 2: Use Bcdedit.exe to restart in DSRM.
====================================
1. Click Start, click Command Prompt, and then click Run as administrator.
2. At the command prompt, type the following command, and then press ENTER:bcdedit /set safeboot dsrepair
3. Type the following command, and then press ENTER:shutdown -t 0 -r
4. To restart the server normally after you perform the restore operation, type the following command, and then press ENTER to have the server restart normally:bcdedit /deletevalue safeboot
Type the following command, and then press ENTER:
shutdown -t 0 -r
You can use this procedure to perform a nonauthoritative restore of AD DS. After replication occurs and is complete, AD DS is recovered on the domain controller.You can use the DSRM administrator password to either locally or remotely log on to the domain controller that you are restoring. You specify the DSRM password when you install AD DS.
Hope this helps!
Best Regards
Elytis ChengElytis Cheng
TechNet Community Support
- Marked As Answer by Elytis ChengModerator Wednesday, June 06, 2012 8:57 AM
-
Monday, May 07, 2012 7:05 PM
Thank you, Elytis
DSRM is not in the F8 menu.
How can I add it there?
-
Tuesday, May 08, 2012 9:53 AM
Like Elytis said, after the server passes the BIOS boot press F8 and the Advanced Boot Options menu you will be presented to you.
Adrian Costea - MCP, MCTS, MCSA 2003, MCITP: Windows 7
My Blog: www.vkernel.ro/blog
- Marked As Answer by Elytis ChengModerator Wednesday, June 06, 2012 8:57 AM

