Knowledge Base

Computer Shuts Down at Startup After You Install Windows 2000 Security Rollup Package 1

Article ID: 318650

Article Last Modified on 10/30/2006

APPLIES TO

Microsoft Windows 2000 Service Pack 1
Microsoft Windows 2000 Service Pack 2

This article was previously published under Q318650

SYMPTOMS

When you restart your Windows 2000 Server-based computer after you install Windows 2000 Security Rollup Package 1 (SRP1) from the Windows Update Web site, you may receive the following error message:

The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.

Time before shutdown: 00:00:30

The system process 'C:\WINNT\system32\lsass.exe' terminated unexpectedly with status code -1073741819. The system will now shut down and restart.

NOTE: The SRP1 update includes the functionality of virtually all Windows 2000 security patches issued since the release of Windows 2000 Service Pack 2 (SP2).

CAUSE

This behavior can occur if the installation of the Windows 2000 SRP1 update is interrupted or has become corrupted.

NOTE: This may occur if an antivirus program is running during the installation of SRP1.

RESOLUTION

To resolve this issue, uninstall the Windows 2000 SRP1 update, and then reinstall it from the local hard disk. To do this, follow these steps:

Restart Windows in Safe mode. To do this, press F8 after the computer Power On Self Test (POST), and then use the ARROW keys to select Safe Mode on the Windows 2000 Advanced Options menu that appears.
Log on to Windows as Administrator, and then start Windows Explorer.
On the Tools menu, click Folder Options.
Click the View tab, click Show hidden files and folders, click to clear the Hide file extensions for known file types check box, click Apply, and then click OK.
Navigate to the following directory location:

%SYSTEMROOT%\$NtUninstallSP2SRP1$\spuninst
In the right pane of Windows Explorer, double-click spuninst.exe.
Click Yes when you are prompted to confirm the removal of Windows 2000 SRP1.
When you are prompted to restart the computer, click OK. Windows restarts normally.
Log on to Windows as Administrator, and then download the Windows 2000 SRP1 update from the following Microsoft Web site:

http://www.microsoft.com/windows2000/downloads/critical/q311401/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3Freleaseid%3D35639%26area%3Dnew%26ordinal%3D2%26redirect%3Dno
Click Go, and then click the Network Installation link.
Click Save this program to disk, and then click OK.
In the Save As dialog box, note the location in which the W2kSP2SRP1.exe file will be saved, and then click Save.
When the download is complete, click Close, and then quit all running programs, including any antivirus programs.
Double-click the W2kSP2SRP1.exe file that you downloaded.

WARNING: Before you install the Windows 2000 SRP1 update, ensure that you have created an Emergency Repair Disk, and that you have a full backup of the computer, including the System State information.
Follow the instructions to install the Windows 2000 SRP1 update.

MORE INFORMATION

Once the W2KSP2SRP1.exe patch has been installed, if the server has Terminal Services installed, connections to the server in question may become disabled until you restart the server.

If an Administrator is unaware of this issue and disconnects the Terminal Server session after installing the patch, s/he is then unable to reconnect to the server to initiate the required restart.

Additionally, if the Terminal Server is in Application Mode, then users will not be able to establish a session until server is restarted. For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

231777 How to Create an Emergency Repair Disk in Windows 2000

311401 Windows 2000 Security Rollup Package 1 (SRP1), January 2002

Keywords: kberrmsg ocsso kbprb KB318650

Microsoft KB Archive/318650

Contents