Err Msg: Security Accounts Manager Initialization Failed Because of the Following Error: Directory Service Cannot Start

ID: Q240655

The information in this article applies to:
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Server

SYMPTOMS

When a domain controller is started, the following error message may be displayed:

Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.
If you click OK, the computer restarts.


CAUSE

This behavior can occur if you mark objects in Active Directory as authoritative using the Ntdsutil tool, and then restore Active Directory from a backup. This is the incorrect order in which to perform these steps.


RESOLUTION

To resolve this issue:

  1. Boot into Directory Services Restore Mode.


  2. Restore Active Directory from a back-up tape.


  3. Restart the domain controller normally.



A simplified breakdown of the procedure to authoritatively restore Active Directory objects follows. For additional information refer to Windows Help or click the article number below to view the article in the Microsoft Knowledge Base:
Q216243 Impact of Authoritative Restore on Trusts and Computer Accounts
  1. Boot into Directory Services Restore Mode.


  2. Restore Active Directory from a back-up tape.


  3. Using the Ntdsutil tool, mark the selected Active Directory object (or tree of objects) as authoritative.


  4. Restart the domain controller normally.


Additional query words: sam

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbprb


Last Reviewed: December 29, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.