XADM: Service Specific Error 4021 Starting Information Store

The DS_E_INSUFFICIENT_ACCESS_RIGHTS error occurs when you try to start the Microsoft Exchange Server information store service. This error is displayed in a dialog box with the following text: The event viewer will also show this same error.

This error occurs because a directory store database is restored which contains a service account with an incorrect security ID (SID). This may happen if the Windows NT Security Account Manager (SAM) database has been lost or re-created. The Exchange Server directory service will start, but after starting the information store service, the error message displays.

The directory service can be regenerated by using the restored version of the information store databases. To do this, follow these steps:

1. Reinstall Exchange Server with the new service account.
2. Stop the Information Store service, and then restore the Information Store Databases only.
3. Start the Information Store service.
   
   Note If the Information Store service is restored from an offline backup, you must run an isinteg -patch if you receive a 1011 error when you start the Information Store service.
4. In the Exchange Server Administrator program, select the Server Properties page of the Exchange Server computer.
5. On the Advanced tab, click All inconsistencies under DS/IS consistency adjustment, and then click Adjust.
   
   Note In Exchange 5.5, click to select the Synchronize with the directory check box, and then create new directory entries for mailboxes that do not have a corresponding directory entry.

Your directory is repopulated and contains a service account with a correct SID.

If a .csv file with exported directory information is available, that information can be imported into the Microsoft Exchange Server directory.

For more information, see the Disaster Recovery white paper from the following Microsoft Web site: