Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Cannot repair Active Directory

Posted on 2004-05-02
Medium Priority
Last Modified: 2008-05-30
Hi everyone,

I have encountered the famous Active Directory 0xc00002e1 error in Windows 2003 Server after resizing a partition on the hard disk. Now, plenty information is given on how to recover everything. You have to run the server in Directory Services Repair Mode, then use ntdsutil.

The problem is, when I run the Directory Services Repair Mode and log in as Administrator, the system logs in normally and then after showing the "Applying Computer Settings", it simply logs off by itself before I can do anything. I've spent the whole day reading and trying things, but I'm strongly limited by the fact that I don't have a single way of logging to the server (no safe mode, no command prompt, no directory services repair mode, etc.)

If anyone has a clue, it would really be appreciated!
Question by:Lost_Beny
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Accepted Solution

Tony_Ts earned 375 total points
ID: 10977291
In DSRM (Directory Service Restore Mode) do you have network support? Can you connect to the server's registry remotely ? If so then navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop and change the SCRNSAVE.EXE value to cmd.exe. That way you will get a comand prompt, as a screen saver, which will help you since you can't logon to the server. Be sure to also set the ScreenSaveTimeOut value to a low value (the values are in seconds) so the screensaver kicks in as soon as the server has booted.

Of course, it goes without saying, if you don't feel confortable editting the registry DO NOT TRY the above.

Author Comment

ID: 10978052
It's not possible for me to test right now, but I think it should work and it's a very good idea, thank you.

Author Comment

ID: 10982722
No, it doesn't work!

There's no network support in DSRM.

I'm really getting despaired...
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.


Expert Comment

ID: 11004087
At first have a full backup of the system (clonning the disk might be a good idea) because if you follow the steps bellow you'll modify many things and it might be not possible to go back. So, in that case, a backup would be handy ;)
Then try replacing the Administrators profile with the contents of the default profile. You can do that by using the recovery console (boot from Windows CD and at some point you get an option of repairing, choose recovery console). The administrator's profile can be found at C:\Documents and Settings\Administrator. Try replacing everything in that folder with the contents of the C:\Documents and Settings\Default User folder.
If it is a profile problem this should fix it.

Author Comment

ID: 11007862
This is a good idea.
I have also found a way to load the registry hive from another partition. Changing to cmd.exe like you said did not work, there was simply no more screen saver.
If your solution doesn't work, someone suggested it might be the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
which causes the problem. There are a few others which could make my logon do this in the Winlogon keys.

I'll tell you the results later.
Thanks a lot...

Author Comment

ID: 11019103
I've found the answer! After a week, believe me I'm quite happy.

After browsing through the registry, I finally found that the problem was in the HKEY_LOCAL_MACHINE\System\MountedDevices keys.
Since I had resized the partition from another OS, the keys hadn't been updated to reflect the change and the new partitions weren't associated to their corresponding letters. Therefore the system couldn't find anything and the first thing to bug was lsass.exe.
I copied the binary values of the other OS and it worked right after.

Thanks a lot for your help, I wouldn't have thought of checking the registry if you hadn't suggested it!

Expert Comment

ID: 11111971
I have the same problem. I ghosted a server 2003 disk to a larger hard drive so now the partitions are larger. When I start up I get the same error as above. I dont have an alternate OS to copy the binary information from. Does anyone have a suggestion on how I could get this to work?

Expert Comment

ID: 11412814
Dear Beny:
I encountered the same problem.
Would you please tell me how to load the registry hive from another partition?
Thank you so much!!

Expert Comment

ID: 11572715
Hey Lost Beny
Could you share How Did you accesses Win2k3 from Other operating system ??? or How Did you do Following,
 "I copied the binary values of the other OS and it worked right after."


Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam® is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question