You Cannot Start a Newly Promoted Domain Controller After You Remove Windows 2000 SP2 SRP1

If you install Windows 2000 Service Pack 2 (SP2) Security Rollup Package (SRP1) on a computer that is not a domain controller, and then you promote that computer to a domain controller, you cannot start the newly promoted domain controller if you remove SRP1.

To resolve this problem, demote the newly promoted domain controller, and then remove SRP1.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.