Microsoft KB Archive/240655

Knowledge Base

Err Msg: Security Accounts Manager Initialization Failed Because of the Following Error: Directory Service Cannot Start

Article ID: 240655

Article Last Modified on 2/28/2007

---

APPLIES TO

• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server

---

This article was previously published under Q240655

SYMPTOMS

When a domain controller is started, the following error message may be displayed:

Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.

If you click OK, the computer restarts.

CAUSE

This behavior can occur if you mark objects in Active Directory as authoritative using the Ntdsutil tool, and then restore Active Directory from a backup. This is the incorrect order in which to perform these steps.

RESOLUTION

To resolve this issue:

1. Boot into Directory Services Restore Mode.
2. Restore Active Directory from a back-up tape.
3. Restart the domain controller normally.

A simplified breakdown of the procedure to authoritatively restore Active Directory objects follows. For additional information refer to Windows Help or click the article number below to view the article in the Microsoft Knowledge Base:

216243 The effects on trusts and computer accounts when you authoritatively restore Active Directory

1. Boot into Directory Services Restore Mode.
2. Restore Active Directory from a back-up tape.
3. Using the Ntdsutil tool, mark the selected Active Directory object (or tree of objects) as authoritative.
4. Restart the domain controller normally.

Additional query words: sam

Keywords: kbenv kbprb KB240655

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.