Question: why we need dsrm password?
Answer: DSRM is only needed when Active Directory is so damaged that you cannot log on using your normal AD Administrator password. Use DSRM when doing a domain-wide restore or a forest-wide restore when AD is so damaged that it will not boot normally.