W2k3 AD Server:

Posted on 2011-10-17
Last Modified: 2012-05-12

We use a Windows 2k3 Enterprise Server as our primary DC and terminal server. This morning after applying MS Updates and restarting as requested, the server failed to start with the following error:

System Error, security accounts manager initialization failed because of the following error: Directory Services cannot start. Error status 0xc00002e1

After starting in DSRM, I ran
ntdsutil files integrity 

Open in new window

which produced the error

Failed to initialize Databank Jet Error -50

followed, however, by an ostensibly successful integrity check. (exit code 0)

This did not seem to help things, as the server still could not start, so I assume that one or more of the files under /WINDOWS/NTDS is corrupt.

I do have current filesystem backups - would it work to simply restore the files under /WINDOWS/NTDS, or is it more complicated than that?


Question by:alpha-lemming
    LVL 11

    Accepted Solution


    Do one thing , start your server in safe mode & remove the windows updates.

    Tushar Kaskhedikar

    Author Comment

    nope, didn't help.
    LVL 13

    Assisted Solution

    Directory Services Restore Mode:
    LVL 9

    Assisted Solution

    First you need to check the integrity of the NTDS database in normal mode if you find database is corrupt in the integryty check, then you need to login into DSRM mode and perform off-line defragmentation. Do not forget to take backup before you perform defrag. Please refer following KBs to do so...

    Author Closing Comment

    Thanks guys, eventually solved the problem by renaming the transaction log and rebooting.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now