qvfps
asked on
Windows 2000 Kerberos problem
Recently we had a power failure and one of our vmware machines lost power unexpectedly. One of the VMs was a Legacy Windows 2000 server. Since the power issue I have been able to boot the other virtual servers but not the Windows 2000 server.
When I boot the server I get a message:
Security Accounts Manager initialization failed because of the following error: Directory Services cannot start, error status 0xc00002e1.
I have tried booting into safe mode and running disk check, booting into Directory Service Restore mode, and restoring to Last Know Good Configuration. None of these made any difference. The only way I can get into the server is Directory Service Restore Mode. Any other way ends up with the above error message.
If I boot into Directory Services Restore Mode and Check the Event Log I find the following error message:
The security account manager (SAM) or Local Security Authority (LSA) server was in the wrong state to perform the security operation.
I tried running Netdiag and dcdiag and I could not find either one on the server.
When I boot the server I get a message:
Security Accounts Manager initialization failed because of the following error: Directory Services cannot start, error status 0xc00002e1.
I have tried booting into safe mode and running disk check, booting into Directory Service Restore mode, and restoring to Last Know Good Configuration. None of these made any difference. The only way I can get into the server is Directory Service Restore Mode. Any other way ends up with the above error message.
If I boot into Directory Services Restore Mode and Check the Event Log I find the following error message:
The security account manager (SAM) or Local Security Authority (LSA) server was in the wrong state to perform the security operation.
I tried running Netdiag and dcdiag and I could not find either one on the server.
ASKER
Yes. This is a single server domain.
ASKER
I am revisiting this post. I have been able to boot the server into Directory Services Restore Mode. However I have been unable to recover AD. I have tried ntdisutil and esentutl.
When I try to run ntdisutil I always end up with an inconsistent database when I run ntdsutil semantic database analysis I get an error that the database is inconsistent
When i trun esentutl /g I get an error message that the file is missing.
Right now I would just like to remove AD completely so I can reinstall it. However the only way I can get it to boot is into Directory Services Restore Mode. When I run DCPROMO it tells me the server is in safe mode to restart and login normally and run DCPROMO again.
Is there any way to uninstall AD while within Directory Services Mode? Are there any services I can disable to allow me to boot without starting AD so I can remove DCPROMO?
When I try to run ntdisutil I always end up with an inconsistent database when I run ntdsutil semantic database analysis I get an error that the database is inconsistent
When i trun esentutl /g I get an error message that the file is missing.
Right now I would just like to remove AD completely so I can reinstall it. However the only way I can get it to boot is into Directory Services Restore Mode. When I run DCPROMO it tells me the server is in safe mode to restart and login normally and run DCPROMO again.
Is there any way to uninstall AD while within Directory Services Mode? Are there any services I can disable to allow me to boot without starting AD so I can remove DCPROMO?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
This worked
Your only DC?