Microsoft KB Archive/329875

Knowledge Base

"LSAOpenPolicySec Could Not Be Located" Error Message After You Apply the Q299687 Windows 2000 Security Hotfix

Article ID: 329875

Article Last Modified on 2/28/2007

---

APPLIES TO

• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Professional Edition
• Microsoft Windows 2000 Server

---

This article was previously published under Q329875

SYMPTOMS

After you apply the Q299687 Windows 2000 Security hotfix, you may receive the following error message:

Services.exe
The procedure entry point LSAOpenPolicySec could not be located in Dynamic Link Library ADVAPI32.dll

60 seconds later, the computer may automatically shut down.

CAUSE

This issue occurs if your installation of the Q299687 Windows 2000 Security hotfix is corrupted.

RESOLUTION

To resolve this issue, follow these steps:

1. Start the computer by using the Windows 2000 Setup floppy disks or the Windows 2000 CD-ROM. At the "Welcome to Setup" screen, press R to repair, and then press C to start the Recovery Console.
2. Enter the number for the Windows 2000 installation that you want, and then type the Administrator account password.
3. Type cd \winnt\system32, and then press ENTER.

4. Rename the following files by adding the .old file name extension. For example, to rename the Advapi32.dll file, type ren advapi32.dll advapi32.dll.old, and then press ENTER.

      File name      Date         Time      Size       Version         
      -----------------------------------------------------------------
      Advapi32.dll   6/21/2001    12:23a    355,088    5.0.2195.3737
      Instlsa5.dll   6/21/2001    12:19a    519,440    5.0.2195.3738
      Kdcsvc.dll     6/21/2001    12:23a    142,608    5.0.2195.3738
      Kerberos.dll   6/13/2001    05:43p    209,008    5.0.2195.3738
      Ksecdd.sys     5/29/2001    09:26a     69,456    5.0.2195.3649
      Lsasrv.dll     6/13/2001    05:32p    501,520    5.0.2195.3738
      Lsasrv.dll     6/13/2001    05:32p    501,520    5.0.2195.3738
      Lsass.exe      6/13/2001    05:32p     33,552    5.0.2195.3738
      Ntdsa.dll      6/21/2001    12:23a    909,072    5.0.2195.3758
      Samsrv.dll     6/21/2001    12:23a    382,224    5.0.2195.3762
      Scecli.dll     5/29/2001    09:53a    128,784    5.0.2195.3649
      Scesrv.dll     5/30/2001    02:19a    299,792    5.0.2195.3649
                       

5. For each file listed in step 4, type the following command, and then press ENTER:

   copy \winnt\system32\$NtUninstallQ299687$\filename

6. Restart Windows, click Start, point to Settings, click Control Panel, and then click Add/Remove Programs.
7. Click Windows 2000 Hotfix (Pre-SP3)[See Q299687 for more information], and then click Change/Remove.
8. Follow the on-screen instructions to complete the removal of the hotfix.
9. Click the following link to download the Q299687 Windows 2000 Security hotfix:
   
   http://www.microsoft.com/windows2000/downloads/security/q299687/default.asp
10. Make sure that no one is connected to the server, quit all programs, and then stop all unnecessary services.
11. Install the Q299687 hotfix by double-clicking the file that you downloaded in step 9.
12. Restart the server.

MORE INFORMATION

301645 HOW TO: Use Recovery Console on a Computer That Does Not Start in Windows 2000

Keywords: kberrmsg kbprb KB329875

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.