Link to home
Start Free TrialLog in
Avatar of elie_assoury
elie_assoury

asked on

windows 2000 server not logging because system file was renamed by mistake

Hi I'm Elie ,
My problem is : we have a server DELL poweredge 2850 with operating system windows 2000 server With RAID 1 ,  somebody by mistake was rename the file
lsass.exe by aa.exe located on system32  it's the logging file for window so now windows not logging , we need to rename this file by its original name but the problem
is we cannot boot and access the harddrive how can i do it ??
Avatar of Jay_Jay70
Jay_Jay70
Flag of Australia image

Hi elie_assoury,

cannot boot and access the hardrive.......  what do you mean   what happens when you turn on the machine   where does it get to?

Cheers!
Avatar of elie_assoury
elie_assoury

ASKER

hi jay ,

windows start and at the point of opening the log screen i get an empty screen , i know the cause , the exe file responsible to lunch the log form is renamed by other name .

my  question is how can i access this  file to rename it by its original name ,  i need  a  way  to boot and go to c:\winnt\system32   , with raid 1 configuration how can i access the

hardisk ???
Avatar of Luc Franken
Hi elie_assoury,

You can just boot into the recovery console and rename the file back to lsass.exe

Description of the Windows 2000 Recovery Console
http://support.microsoft.com/kb/229716

Once you're in the recovery console, just browse to C:\winnt\system32 and use "ren aa.exe lsass.exe" to rename the file.
If nothing else on the computer got messed up by the person who renamed the file, you should be able to boot the server without any problems again.

Greetings,

LucF
thx LucF  but
when i try to make recover console i get message  that  no  hardisk found , please somebody understand  me  
i need a way that i can access the logical harddrive without Operating system .

i have 3 hardisks with raid controller 1  so my question how can read and write on these hardisks  without operating system ??

just i need  to rename  one  file  and  my  problem will be  solved .
Elie_assoury,

As you're using a raid controller you'll have to install a driver for that controller during startup in RC. At the beginning it'll ask you "Press F6 to install a 3rd party SCSI controler", at that time, press F6 and make sure to install a 3.5" floppy which includes only the driver in the root (A:\)

Now your disk will get recognized. If you don't have a floppy containing those drivers, check the support website of your controler.

LucF
sorry for the late response, Elie_assoury, but i think LucF has nailed everything i would have said either way!
can u please give me a link to download the driver of raid controller that i must use

server : dell poweredge 2850

ASKER CERTIFIED SOLUTION
Avatar of Jay_Jay70
Jay_Jay70
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thx  buys  thx  a lot  ....
You're welcome elie_assoury.
For future reference, you could have split the points as explained at http:help.jsp#hi69

Best regards,

LucF
thanks elie, i think LucF helped you out just as much if not more though, maybe you could reopen the question and split the points :)

all the best