Link to home
Start Free TrialLog in
Avatar of fred2k3
fred2k3

asked on

Can't restore Domain Controller, Shadow Copy expired

Hi,

I'm trying to restore a Win Svr 2003 standard SP1 system using Symantec BE 12.5. The server is a Domain Controller. I'm restoring all HD partitions + Shadow copy components and the System State. I am performing the restore in Windows Directory service restore mode as recommended. The restore completes successfully, but when I reboot the system I get:

 "lsass.exe - Security accounts manager initialization failed. Directory service cannot start. Error status 0xc0000Ze1. Reboot into directory service restore mode"

I am able to boot into Directory service restore mode ok, and in Event Viewer I think I've found the source of the problem:

Event Type: Error
Event Source: NTDS Replication
Event Category: Backup
Event ID: 1918
Description: The shadow copy service cannot restore Active Directory because the shadow copy used is too old.   Shadow copy expiration date: 2012-09-02 18:23:48

It's not vital that this server is recovered at this stage because it's a Disaster Recovery machine, but I need to find a way of preventing this happening at the restore point by extending the Shadow copy expiration date.. or any other means! Any help much appreciated.
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of fred2k3
fred2k3

ASKER

Thank you for the reply Mike.

The Tombstone Lifetime for the forest is set at 180. I'm struggling to make a connection as to why this would cause a problem restoring though.. objects must get deleted all the time and 180 days isn't much considering how many years this server has been running (DR tests in the past haven't exhibited this problem). I will look into the other suggestion.. thanks again.

Does anyone know anything about this Shadow Copy expiration? Google searches haven't proved fruitful for me so far.
You gave us wrong error code it is not 0xc0000Ze1 it is 0xc00002e1. Check the following links  to work on the issue. I believe that is why Mike didn't gave correct resolution. However check these links.

http://support.microsoft.com/kb/830574

http://support.microsoft.com/kb/258062

Note:-  KB258062 works on 2003STD aswell.
Avatar of fred2k3

ASKER

Ah, apologies for the confusion with that error code.

Zenvenky - thanks for the links.. I have tried that hotfix but it says my Service Pack is already more upto date. Neither article relates to Event ID: 1918 which I'm now positive is the cause of the issue.

Event ID: 1918
Description: The shadow copy service cannot restore Active Directory because the shadow copy used is too old.   Shadow copy expiration date: 2012-09-02 18:23:48

If I boot into Directory service restore mode and change the system clock to before this date I don't get the lsass.exe error (I do get a Windows activation problem but that's a seperate issue) so it's definitely this shadow copy expiry causing the problem.
Did you ever find a solution to your issue? I amhaving the same problem
Avatar of fred2k3

ASKER

Hi TeamLogicIT, the problem was that the backup tape was too old and therefore did not restore. Using a more recent tape solved the problem. Hope it helps.
Avatar of fred2k3

ASKER

I've requested that this question be closed as follows:

Accepted answer: 0 points for fred2k3's comment #a39030190

for the following reason:

No other answers were suitable.