Err Msg: Security Accounts Manager Initialization Failed Because of the Following Error: Directory Service Cannot Start

View products that this article applies to.

This article was previously published under Q240655

Expand all | Collapse all

SYMPTOMS

When a domain controller is started, the following error message may be displayed:

Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.

If you click OK, the computer restarts.

Back to the top

CAUSE

This behavior can occur if you mark objects in Active Directory as authoritative using the Ntdsutil tool, and then restore Active Directory from a backup. This is the incorrect order in which to perform these steps.

Back to the top

RESOLUTION

To resolve this issue:

Boot into Directory Services Restore Mode.
Restore Active Directory from a back-up tape.
Restart the domain controller normally.

A simplified breakdown of the procedure to authoritatively restore Active Directory objects follows. For additional information refer to Windows Help or click the article number below to view the article in the Microsoft Knowledge Base:

216243 (http://support.microsoft.com/kb/216243/EN-US/ ) The effects on trusts and computer accounts when you authoritatively restore Active Directory

Boot into Directory Services Restore Mode.
Restore Active Directory from a back-up tape.
Using the Ntdsutil tool, mark the selected Active Directory object (or tree of objects) as authoritative.
Restart the domain controller normally.

Back to the top