Research on a recurring event-1005 error on an SBS 2003 box clued me into some interesting facts.  When SBS 2003 first came out, the Directory Services Restore (DSRM) password automatically sync'ed itself to the 'administrator' account password.  But when Win2003 SP1 was released, it 'broke' this behavior.  So, some early SBS03 customers might have had their DSRM password auto-changed several times before SP1.  If so, it could be difficult to determine that password should the need arise to restore AD.  As easy way around this scenario would be to proactively change the DSRM password manually.  As long as SBS is at SP1 or later, it should stay 'static'.