Minimbah Administrator
2009-02-06 22:59:05 UTC
Hi all,
I manage the single SBS 2003 server at a small charity on a pro bono basis.
We have had a serious problem with Active Directory. When the system starts
up the following error message appears:
LSASS.EXE - System Error, security accounts manager initialization failed
because of the following error: Directory Services cannot start. Error
status 0xc00002e1
I have followed the troubleshooting steps in the Knowledge Base article
258062 and the good news appears to be that the NTDSUTIL reports that
directory database is consistent. The bad news is that it seems that the
edb.log file is corrupt.
I tried to perform an offline defragmentation using NTDSUTIL and it failed
with a Jet error -501. The error messages lin the event viewer look similar
to the following:
Event Type: Error
Event Source: NTDS ISAM
Event Category: Logging/Recovery
Event ID: 465
User: N/A
Computer:
Description:
NTDS (532) NTDSA: Corruption was detected during soft recovery in logfile
E:\WINDOWS\NTDS\edb.log. The failing checksum record is located at position
END. Data not matching the log-file fill pattern first appeared in sector
xxxx. This logfile has been damaged and is unusable.
For more information, see Help and Support Center
There is not another domain controller in the domain and there is not a
recent system state backup. (The donated server we were using for backups
across the network fell over a few months ago. These are the challenges of
trying to keep a network running on a near-zero budget).
So my questions are simple -
1) Should I proceed with a lossy recovery of Active Directory as suggested
in KB 258062?
2) Given the error messages above, is a lossy recovery even likely to work?
3) If the lossy recovery option does not work, do I have any other option
apart from a total rebuild ?
Any help or suggestions would be greatly appreciated.
Thanks
I manage the single SBS 2003 server at a small charity on a pro bono basis.
We have had a serious problem with Active Directory. When the system starts
up the following error message appears:
LSASS.EXE - System Error, security accounts manager initialization failed
because of the following error: Directory Services cannot start. Error
status 0xc00002e1
I have followed the troubleshooting steps in the Knowledge Base article
258062 and the good news appears to be that the NTDSUTIL reports that
directory database is consistent. The bad news is that it seems that the
edb.log file is corrupt.
I tried to perform an offline defragmentation using NTDSUTIL and it failed
with a Jet error -501. The error messages lin the event viewer look similar
to the following:
Event Type: Error
Event Source: NTDS ISAM
Event Category: Logging/Recovery
Event ID: 465
User: N/A
Computer:
Description:
NTDS (532) NTDSA: Corruption was detected during soft recovery in logfile
E:\WINDOWS\NTDS\edb.log. The failing checksum record is located at position
END. Data not matching the log-file fill pattern first appeared in sector
xxxx. This logfile has been damaged and is unusable.
For more information, see Help and Support Center
There is not another domain controller in the domain and there is not a
recent system state backup. (The donated server we were using for backups
across the network fell over a few months ago. These are the challenges of
trying to keep a network running on a near-zero budget).
So my questions are simple -
1) Should I proceed with a lossy recovery of Active Directory as suggested
in KB 258062?
2) Given the error messages above, is a lossy recovery even likely to work?
3) If the lossy recovery option does not work, do I have any other option
apart from a total rebuild ?
Any help or suggestions would be greatly appreciated.
Thanks