Article ID: 240655 - Last Review: February 28, 2007 - Revision: 3.4

Err Msg: Security Accounts Manager Initialization Failed Because of the Following Error: Directory Service Cannot Start

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
This article was previously published under Q240655
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center (http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000) is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
Expand all | Collapse all

SYMPTOMS

When a domain controller is started, the following error message may be displayed:
Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.
If you click OK, the computer restarts.
Back to the top

CAUSE

This behavior can occur if you mark objects in Active Directory as authoritative using the Ntdsutil tool, and then restore Active Directory from a backup. This is the incorrect order in which to perform these steps.
Back to the top

RESOLUTION

To resolve this issue:
  1. Boot into Directory Services Restore Mode.
  2. Restore Active Directory from a back-up tape.
  3. Restart the domain controller normally.

A simplified breakdown of the procedure to authoritatively restore Active Directory objects follows. For additional information refer to Windows Help or click the article number below to view the article in the Microsoft Knowledge Base:
216243  (http://support.microsoft.com/kb/216243/EN-US/ ) The effects on trusts and computer accounts when you authoritatively restore Active Directory
  1. Boot into Directory Services Restore Mode.
  2. Restore Active Directory from a back-up tape.
  3. Using the Ntdsutil tool, mark the selected Active Directory object (or tree of objects) as authoritative.
  4. Restart the domain controller normally.
Back to the top
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
Back to the top
Keywords: 
kbenv kbprb KB240655
Back to the top