• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1338
  • Last Modified:

ntds.dit file is corrupt on one DC. Is it ok to simply copy the same file from a good DC and overwrite it on the bad DC?


One of my DC's is failing to boot because the ntds.dit file has become corrupted.  I can only boot the DC in Directory Services Restore mode.  This DC is also the Global Catalog server in my domain of 3 DC's.  I'd rather not do a forced demote on this DC because I'd then have to make another DC the Global Catalog server in the process.

Can I just simply copy the ntds.dit file from one of the other DC's and replace the corrupted file?

1 Solution
no dont copy it.
boot into ad restore mode.
To use Ntdsutil to recover the Active Directory database, type "ntdsutil files repair" at a command prompt in Directory Service Restore Mode.
After the repair operation is complete, rename the .log files in the NTDS folder by using a different extension such as .bak, and try to start the domain controller in normal mode.
If the repair operation does not appear to finish, you can try to repair the database by using Esentutl.
At the command prompt, type the following command:
"esentutl /p path\ntds.dit"
After the command has finished running, rename the .log files in the NTDS folder by using a different extension such as .bak.
reboot in normal mode.
kevinfinlayAuthor Commented:

I couldn't get "ntdsutil files repair" to work because I believe it was the wrong syntax.  I believe "repair" should be "recover" but no luck using "recover.

I then followed your instrucstions for "esentutl" and it worked perfectly!

Thank you! Thank you! Thank you!

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now