Server 2003 Repair (Using the Installation CD).

Posted on 2007-12-01
Medium Priority
Last Modified: 2011-08-18
Hello everyone,

I have SOHO here.  We have 2 DC's running Server 2003 SP2 and the primary or Catalog server has had problems with some of its services starting upon reboot.  We were thinking of booting from the installation CD and running a "repair" on the current installtion.  My questions are this?

1)  What changes will be made to AD?  We do have a second DC in place for redundacy.
2)  DNS\DHCP\WINS.  Will all of these services have to be reconfigured?

I'm hoping to repair the installation and have everything come back up normally and re-apply SP2.

Any thoughts or feedback would be appreciated,


Question by:sna1alm
LVL 70

Accepted Solution

KCTS earned 375 total points
ID: 20390091
performing a recovery SHOULD NOT affect the configuration of DNS etc or AD, it will replace some system files and may chnage some registry settings - as with any action like this though make sure you have a goog recent backup before proceeding. If you configure the other DC as another DNS server (and configure your clients to use it as the Alternate DNS Server), and also configure it as a second global catalog server you will provide better redundancy.

In the worst event, if the repair and attepts at fixing the first DC fail, you yould then transfer the FSMO roles to the second DC, demote the first DC and then rebuild it.
LVL 48

Assisted Solution

Jay_Jay70 earned 375 total points
ID: 20392621
difference of opinion here.....dont run a repair on a DC....from what i have seen, it breaks them........

Author Closing Comment

ID: 31414709
Thank you.  After further review, the repair CD does corrupt the current AD environment.  I promoted another DC and rebuilt the operations master.  Thank you for your input.

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.


Expert Comment

ID: 20646903
I just went through this. I had 2 DC's and performed a repair. Everything came back up!  This also fixed the start up problem I was having.  AWESOME!  

Expert Comment

ID: 24143913
I am having server 2003 dll problems and the machine is also a DC that handles VPN connections.

My add remove programs will not come back up when I try to remove a program, nothing happens.
What cmd should I run in the recovery console?

Author Comment

ID: 24144474
Hi I opened the original question.  I would suggest building another server and joining it to the domain as a member server.  Promote it and then transfer the FSMO roles to the new server.

I have had bad experiences with running the recovery CD.  You can use the above solution on a laptop or a desktop if you don't have any extra server hardware available.  I've actually used the above solution as a temp remedy while I re-built the primary server hardware!?  Transferred the FSMO roles to a laptop DC, then transferred them back to a rebuilt server.

You will have to recreate your VPN settings with this solution; but it is an option that has worked well for me in the past.


Featured Post

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question