Solved

Cannot repair Active Directory

Posted on 2004-05-02
9
2,318 Views
Last Modified: 2008-05-30
Hi everyone,

I have encountered the famous Active Directory 0xc00002e1 error in Windows 2003 Server after resizing a partition on the hard disk. Now, plenty information is given on how to recover everything. You have to run the server in Directory Services Repair Mode, then use ntdsutil.

The problem is, when I run the Directory Services Repair Mode and log in as Administrator, the system logs in normally and then after showing the "Applying Computer Settings", it simply logs off by itself before I can do anything. I've spent the whole day reading and trying things, but I'm strongly limited by the fact that I don't have a single way of logging to the server (no safe mode, no command prompt, no directory services repair mode, etc.)

If anyone has a clue, it would really be appreciated!
Thanks,
Beny
0
Comment
Question by:Lost_Beny
9 Comments
 
LVL 1

Accepted Solution

by:
Tony_Ts earned 125 total points
ID: 10977291
In DSRM (Directory Service Restore Mode) do you have network support? Can you connect to the server's registry remotely ? If so then navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop and change the SCRNSAVE.EXE value to cmd.exe. That way you will get a comand prompt, as a screen saver, which will help you since you can't logon to the server. Be sure to also set the ScreenSaveTimeOut value to a low value (the values are in seconds) so the screensaver kicks in as soon as the server has booted.

Of course, it goes without saying, if you don't feel confortable editting the registry DO NOT TRY the above.
0
 

Author Comment

by:Lost_Beny
ID: 10978052
It's not possible for me to test right now, but I think it should work and it's a very good idea, thank you.
0
 

Author Comment

by:Lost_Beny
ID: 10982722
No, it doesn't work!

There's no network support in DSRM.

I'm really getting despaired...
0
 
LVL 1

Expert Comment

by:Tony_Ts
ID: 11004087
At first have a full backup of the system (clonning the disk might be a good idea) because if you follow the steps bellow you'll modify many things and it might be not possible to go back. So, in that case, a backup would be handy ;)
Then try replacing the Administrators profile with the contents of the default profile. You can do that by using the recovery console (boot from Windows CD and at some point you get an option of repairing, choose recovery console). The administrator's profile can be found at C:\Documents and Settings\Administrator. Try replacing everything in that folder with the contents of the C:\Documents and Settings\Default User folder.
If it is a profile problem this should fix it.
0
 

Author Comment

by:Lost_Beny
ID: 11007862
This is a good idea.
I have also found a way to load the registry hive from another partition. Changing to cmd.exe like you said did not work, there was simply no more screen saver.
If your solution doesn't work, someone suggested it might be the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
which causes the problem. There are a few others which could make my logon do this in the Winlogon keys.

I'll tell you the results later.
Thanks a lot...
0
 

Author Comment

by:Lost_Beny
ID: 11019103
I've found the answer! After a week, believe me I'm quite happy.

After browsing through the registry, I finally found that the problem was in the HKEY_LOCAL_MACHINE\System\MountedDevices keys.
Since I had resized the partition from another OS, the keys hadn't been updated to reflect the change and the new partitions weren't associated to their corresponding letters. Therefore the system couldn't find anything and the first thing to bug was lsass.exe.
I copied the binary values of the other OS and it worked right after.

Thanks a lot for your help, I wouldn't have thought of checking the registry if you hadn't suggested it!
Beny
0
 

Expert Comment

by:Tlamming
ID: 11111971
I have the same problem. I ghosted a server 2003 disk to a larger hard drive so now the partitions are larger. When I start up I get the same error as above. I dont have an alternate OS to copy the binary information from. Does anyone have a suggestion on how I could get this to work?
0
 

Expert Comment

by:h0703g0922
ID: 11412814
Dear Beny:
I encountered the same problem.
Would you please tell me how to load the registry hive from another partition?
Thank you so much!!
0
 

Expert Comment

by:aaron19
ID: 11572715
Hey Lost Beny
Could you share How Did you accesses Win2k3 from Other operating system ??? or How Did you do Following,
 "I copied the binary values of the other OS and it worked right after."

Thanks,
AD
0

Join & Write a Comment

As the title indicates, I have done this before. It chills me everytime I update the OS on my phone, (http://www.experts-exchange.com/articles/18084/Upgrading-to-Android-5-0-Lollipop.html) because one time I did this and I essentially had a bricked …
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now