Article ID: 2642837 - View products that this article applies to.
You have mixed environment containing Windows Server 2003, Windows Server 2008 R2 and Windows Server 2012 Domain Controllers. After transferring PDC FSMO role to a Windows Server 2008 R2 domain controller, when you restart the domain controller, you may receive the following error message:
STOP: C00002CB Security Accounts Manager initialization failed because of the following error: The system cannot find the file specified.
Error Status: 0xc000034.
Please shut down the system and reboot into Directory Services Restore Mode, check event log for more detailed information.
Additionally, at the time when the FSMO role was transferred to this Domain Controller, the system event log contains the following event:
Log Name: System
The error occurs because one or more of the following built-in groups are missing:
To resolve this problem, rebuild or restore the broken domain controller and seize the PDC FSMO to another domain controller.
Note: DO NOT REBOOT the new FSMO role owner. Follow the below steps to create the missing RODC groups:
In a mixed Environment where Windows Server 2003 and Windows Server 2008 R2 domain controllers exist and there are no Read Only Domain controllers and RODC prep has not been run, if the FSMO roles are owned by Windows Server 2003 DC the RODC groups do not exist. Once PDC FSMO is transferred to a Windows Server 2008 R2 DC these groups are automatically created. If this operation fails the above errors will be reported in the System event log and the FSMO owner will experience a blue screen upon reboot.
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 2642837 - Last Review: May 28, 2014 - Revision: 5.0