AD database corrupted

[CP]

Hi all,

I have problem going into my AD and below is the error received during
(before) Windows logon prompt.

LSASS.EXE - System Error, security accounts manager initialization failed
because of the following error: Directory Services cannot start. Error
status 0xc00002e1.
Please click OK to shutdown this system and reboot into directory services
restore mode, check the event log for more detailed information.

I suspect my Active Directory database (Ntds.dit) is corrupted after went
through the article KB258062. Now none of my users able to logon to domain.

Can anyone pls help and advise? The worse thing is I do not have backup yet
as this is still new installation.

Other than reinstallation, what else can i do to recover the "corrupted
database"?

Thanks in advance..


CP

 

[Joe Richards [MVP]]

You shouldn't have been following 258062 unless you were already having issues
so what were the errors that had you do 258062.

For AD recovery you basically have three main recovery mechanisms.

1. You have a second DC that you can promote your DC back from.

2. You have a backup to restore the DC from.

3. You follow the directions in the KB you mentioned, it talks about all of the
tools available to try and repair.

Note that reinstallation isn't going to recover your database, it is going to
wipe it. If, however, you had another DC for the same domain you could simply
reinstall and then do #1.