Solved

FRS service Fails to start

Posted on 2011-02-20
4
665 Views
Last Modified: 2012-05-11
I am getting the following in the application error log after trying to start the frs service.  

Event Type:      Error
Event Source:      ESENT
Event Category:      Logging/Recovery
Event ID:      455
Date:            02/17/11
Time:            1:14:54 PM
User:            N/A
Computer:      RUDDRX
Description:
ntfrs (5016) Error -1811 (0xfffff8ed) occurred while opening logfile c:\windows\ntfrs\jet\log\edb.log.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:kennysmith101
  • 2
  • 2
4 Comments
 
LVL 41

Expert Comment

by:Amit
ID: 34937930
0
 

Author Comment

by:kennysmith101
ID: 34938245
Some of the content refered to in the previous link may apply, but it does not seem to be close enough to fix the problem.  The most likely coment is that there is a corrupted edb file.  Reloading the OS is not an option now.  I am wondering if using dcpromo and removing the AD from the server and then reinstalling AD would work?
0
 
LVL 41

Accepted Solution

by:
Amit earned 500 total points
ID: 34938662
Try this, before you take the step mentioned  by you

To perform a nonauthoritative restore, stop the FRS service, configure the BurFlags registry key, and then restart the FRS service. To do so:
1. Click Start, and then click Run.
2. In the Open box, type cmd and then press ENTER.
3. In the Command box, type net stop ntfrs.
4. Click Start, and then click Run.
5. In the Open box, type regedit and then press ENTER.
6. Locate the following subkey in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
7. In the right pane, double-click BurFlags.
8. In the Edit DWORD Value dialog box, type D2 and then click OK.
9. Quit Registry Editor, and then switch to the Command box.
10. In the Command box, type net start ntfrs.
11. Quit the Command box.
When the FRS service restarts, the following actions occur:
• The value for BurFlags registry key returns to 0.
• An event 13565 is logged to signal that a nonauthoritative restore is started.
• The FRS database is rebuilt.
• When the process is complete, an event 13516 is logged to signal that FRS is operational. If the event is not logged, there is a problem with the FRS configuration.
Note: Non-authoritative restore needs to be performed immediately. If the above solution doesn’t workout escalate to L3 with immediately.

0
 

Author Closing Comment

by:kennysmith101
ID: 34938907
Great job providing easy to follow instructions.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now