Error 0xc00002e1 after AD Restore
Steve D Melone
Windows 2000 Advanced Serve system. I replaced the drive
and did the following:
Loaded Win 20 AS fresh from scratch
Adjusted Drive Letters to match pre-crash state
Rebooted
Loaded SP3 (bringing it back to pre-crash state)
Rebooted Booting into Directory Services Restore Mode
I then ran a restore from a backup file stored on a second
drive (Data Drive) in the system, the backup included All
Files and System State (MS Backup)
In the Advanced Button options I choose:
Original Location
Always replace the file on disk
Restore Security - checked
Restore Removable Storage Database - unchecked
Restore junction points - unchecked
Started Restore
Rebooted after completed
Received the following error booting into normal mode:
"Security Accounts Manager initialization failed because
of the following error: Directory Service cannot start.
Error Status: 0xc00002e1. Please click OK to shutdown
this system and reboot into Directory Services Restore
Mode, check the event log for more detailed information.
After booting into Directory Services Restore Mode and
looking at the Event Viewer, I have the following errors:
APPLICATION LOG
App Error 1
Source rasstrs
Categoy None
Event ID 2005
The description for Event ID ( 2005 ) in Source (
rasctrs ) cannot be found. The local computer may not have
the necessary registry information or message DLL files to
display messages from a remote computer. The following
information is part of the event: .
App Error 2
Source NTDS
Category (10)
Event ID 1229
The description for Event ID ( 1229 ) in Source ( NTDS )
cannot be found. The local computer may not have the
necessary registry information or message DLL files to
display messages from a remote computer. The following
information is part of the event: 2.
App Error 3
Source rasctrs
Category None
Event ID 2005
The description for Event ID ( 2005 ) in Source (
rasctrs ) cannot be found. The local computer may not have
the necessary registry information or message DLL files to
display messages from a remote computer. The following
information is part of the event: .
App Warning
Source WinMgmt
Category None
Event ID 61
WMI ADAP was unable to process the PerfProc performance
library due to a time violation in the collect function
SECURITY LOG
No Errors
SYSTEM LOG
Sys Warning 1
Source Disk
Category None
Event ID 34
The driver disabled the write cache on device
\Device\Harddisk1\DR1.
Sys Warning 2
Source Disk
Category None
Event ID 34
The driver disabled the write cache on device
\Device\Harddisk0\DR0.
Sys Error 1
Source Service Control Manager
Category None
Event ID 7000
The Network Associates Task Manager service failed to
start due to the following error:
The service did not start due to a logon failure.
Sys Error 2
Source Service Control Manager
Category None
Event ID 7013
Logon attempt with current password failed with the
following error:
Logon failure: unknown user name or bad password.
Sys Error 3
Source Service Control Manager
Category None
Event ID 7023
The Intersite Messaging service terminated with the
following error:
The specified server cannot perform the requested
operation.
DIRECTORY SERVICES LOG
DS Warning 1
Sounrce NTDS Inter-site
Category Inter-site Messaging
Event ID 1473
The Intersite Messaging Service failed to read the
configuration of the Intersite Transports out of the
Directory. The error message is as follows:
The specified server cannot perform the requested
operation.
The service has stopped. It will be necessary to correct
the problem and restart the service in order for intersite
communication to occur. The KCC will be unable to
calculate intersite topology without this service.
There may be a problem retrieving data from the LDAP
server. Please verify that LDAP queries are succeeding on
this machine. You may also wish to try restarting the
Intersite Messaging Service manually.
The record data is the status code.
Rob Scheepens
http://www.jsiinc.com/subf/tip2500/rh2599.htm.
Maybe that's of any use? If you've got multiple DC's you can also use the
BurFlags D1 restore "trick" to re-create the AD on the machine you
reinstalled.
\Rob
"Steve D Melone" <sme...@monstercommerce.com> wrote in message
news:008001c30ffe$352394e0$a301...@phx.gbl...