Windows 2016 Standard DC active directory and DNS don't start after updates

Stev0W used Ask the Experts™
We have a single Physical 2016 Standard server on a small site with 15 people. The Server restarted last night after installing updates. This morning the office manager called to say nobody could get online. So I tried remoting in but got the message that the domain controller could not be contacted.

Using light Out, I could get to the servers login screen but it says there is no Domain controller available to process the login with my account.  I have logged on with the Administrator account and tried to start the Active Directory & DNS services, but active directory starts and stops immediately.

I tried to uninstall the updates, but that failed.

I know the daily backup to an external drive using Windows backup succeed on the previous evening. But I am offsite and would like to see if I can recover without restoring from it.

What would be my best course of action from this point?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Dimitris MaleasData recovery engineer

LOG files! take a look at your log files. Why the AD start and stop? You will see it there. Publish it!


Thanks for the reply.
Just a thought, is possible to start Active Directory in safe mode?

In the event viewer when I try to start Active directory in safe mode.
File server Resource Manager finished syncing claims from Active Directory and encountered errors during the sync (0x8007054b, The specified domain either does not exist or could not be contacted) Please check previous event logs for details

nltest /Sc_Query:Domain name

i.e:   nltest /

it should return like this
C:\nltest /
Trusted DC Name \\
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully

if not check the NTP server

all the best


Results of the command:

Flags: 0
Trusted DC Name
Trusted DC connections status= 1311 0x51f ERROR_NO_LOGON_SERVERS
The command completed successfully

Time server responds with sync information, updated a few seconds ago from:
I ran msconfig and saw that safe mode and active directory repair was selected. I selected Normal bootup rather than Safe Mode and it booted up normally and was able to log in normally. Double checked and ensured DNS and AD are running and they are. The updates must have triggered the safe mode boot-up. So now I will try the updates one at a time and see what happens.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial