Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Security Accounts Manager failed on boot

Posted on 2006-06-25
1
Medium Priority
?
17,751 Views
Last Modified: 2013-12-03
We received a phone call from a client with a SBS server saying they could no longer access their server. When we looked at the Server it had rebooted and was 3/4 of the way through but had stopped with an error message of:
lsass.exe - System Error
Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the Event Log for more detailed information.

Upon rebooting without going into Directory Services Restore mode (DSRM) before this error message appears the system says Active Directory is repairing Indices.

When I rebooted into Directory Services Restore mode I found a lot of errors in the event log of services not starting. A few event logs read as such:
Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7023
Date:            23/06/2006
Time:            8:46:06
User:            N/A
Computer:      SERVER1
Description:
The World Wide Web Publishing Service service terminated with the following error:
Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7038
Date:            23/06/2006
Time:            8:47:31
User:            N/A
Computer:      SERVER1
Description:
The WinHttpAutoProxySvc service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:
The handle is invalid.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7038
Date:            23/06/2006
Time:            8:46:06
User:            N/A
Computer:      SERVER1
Description:
The BackupExecRPCService service was unable to log on as <user domain removed for security purposes>\administrator with the currently configured password due to the following error:
The handle is invalid.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Upon more investigation I found that the Kerberos Key Distribution Center and Netlogon services will not start.
When I try to start the Kerberos Key Distribution Center service manually in DSRM I get the error:
Could not start the KKDC service on local computer.
Error 0x80090339: The local machine must be a Kerberos KDC (Domain Controller) and it is not.

When trying to start Netlogon the service fails with the following message:
The Net Logon service on local computer started and then stopped. Some services stop automatically if they do not have work to do, for example, the Performance Logs and Alerts service

Do I need to rebuild the clients server or is there a tool or process I can use to repair this server?



0
Comment
Question by:proactiveit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 2000 total points
ID: 16981748
This is a known issue... please refer to this KB Article for complete instructions for what to do:
http://support.microsoft.com/kb/258062

Make sure you follow everything... and if you run into problems, if you are a Microsoft Partner you will receive free support for this issue from Microsoft Product Support.

Jeff
TechSoEasy
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question