Your network contains 50 domain controllers that runs Windows Server 2008 R2.
You need to create a script that resets the Directory Services Restore Mode (DSRM)
password on all of the domain controllers. The solution must NOT maintain passwords in the
script.
Which two tools should you use? (Each correct answer presents part of the solution. Choose
two.)

A.
Active Directory Users and Computers
B.Ntdsutil
C.Dsamain

D.Local Users and Groups

Explanation:
B: You can also NTDSUTIL command tool to reset DSRM password.
In an elevated CMD prompt where you have logged on as a Domain Admin, run:
NTDSUTIL
SET DSRM PASSWORD
SYNC FROM DOMAIN ACCOUNT <your user here>
Q
Q
D (not A): There comes a day in nearly every administrator’s life where they will need to boot
a domain controller into DS Restore Mode. Whether it’s to perform an authoritative restore or
fix database issues, you will need the local administrator password.