Article ID: 902396
Article Last Modified on 11/15/2007
APPLIES TO
- Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
- Microsoft Windows Server 2003, Web Edition
- Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Datacenter x64 Edition
- Microsoft Windows Server 2003, Enterprise x64 Edition
SYMPTOMS
On a Microsoft Windows Server 2003-based domain controller, the following database corruption error may be intermittently logged in the Directory Services event log:
Note Service Pack 1 is included in x64-based versions of Windows Server 2003.
CAUSE
The database engine cannot update certain indexes in Active Directory. This database problem occurs because of the problems with the code pages and language locales that are used in the Lsass.exe system process.
RESOLUTION
Service pack information
To resolve this problem, obtain the latest service pack for Windows Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
889100 How to obtain the latest service pack for Windows Server 2003
Hotfix information
Important To resolve this problem in the Active Directory forest, you must apply the following hotfix on all domain controllers in the forest.
The next time that a domain controller restarts after you apply this hotfix, the affected indexes are deleted and rebuilt. Rebuilding the indexes adds time to the startup process, depending on the size of the local NTDS.dit database and on the server hardware.
Prerequisites
There are no prerequisites
Note Service Pack 1 is included in x64-based versions of Windows Server 2003.
Restart requirement
You must restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace any other hotfixes.
File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2003, 32-bit versions
| File name | File version | File size | Date | Time | Platform | SP requirement | Service branch |
|---|---|---|---|---|---|---|---|
| Esent.dll | 5.2.3790.498 | 975,872 | 07-Mar-2006 | 21:51 | x86 | None | RTMQFE |
| Ntdsa.dll | 5.2.3790.498 | 1,432,064 | 07-Mar-2006 | 21:51 | x86 | None | RTMQFE |
| Ntdsatq.dll | 5.2.3790.498 | 29,696 | 07-Mar-2006 | 21:51 | x86 | None | RTMQFE |
| Esent.dll | 5.2.3790.2654 | 1,047,040 | 07-Mar-2006 | 22:00 | x86 | None | SP1QFE |
| Ntdsa.dll | 5.2.3790.2654 | 1,520,640 | 07-Mar-2006 | 22:00 | x86 | None | SP1QFE |
Windows Server 2003, 64-bit Itanium-based versions
| File name | File version | File size | Date | Time | Platform | SP requirement | Service branch |
|---|---|---|---|---|---|---|---|
| Esent.dll | 5.2.3790.498 | 2,607,104 | 07-Mar-2006 | 21:14 | IA-64 | None | RTMQFE |
| Ntdsa.dll | 5.2.3790.498 | 4,068,352 | 07-Mar-2006 | 21:14 | IA-64 | None | RTMQFE |
| Ntdsatq.dll | 5.2.3790.498 | 82,432 | 07-Mar-2006 | 21:14 | IA-64 | None | RTMQFE |
| Esent.dll | 5.2.3790.2654 | 2,775,552 | 07-Mar-2006 | 21:17 | IA-64 | None | SP1QFE |
| Ntdsa.dll | 5.2.3790.2654 | 4,252,160 | 07-Mar-2006 | 21:17 | IA-64 | None | SP1QFE |
| Wesent.dll | 5.2.3790.2654 | 1,047,040 | 07-Mar-2006 | 21:17 | x86 | None | WOW |
| Wntdsa.dll | 5.2.3790.2654 | 1,520,640 | 07-Mar-2006 | 21:17 | x86 | None | WOW |
Windows Server 2003, 64-bit x64-based versions
| File name | File version | File size | Date | Time | Platform | SP requirement | Service branch |
|---|---|---|---|---|---|---|---|
| Esent.dll | 5.2.3790.2654 | 2,367,488 | 07-Mar-2006 | 21:17 | x64 | None | SP1QFE |
| Ntdsa.dll | 5.2.3790.2654 | 2,964,992 | 07-Mar-2006 | 21:17 | x64 | None | SP1QFE |
| Wesent.dll | 5.2.3790.2654 | 1,047,040 | 07-Mar-2006 | 21:18 | x86 | None | WOW |
| Wntdsa.dll | 5.2.3790.2654 | 1,520,640 | 07-Mar-2006 | 21:18 | x86 | None | WOW |
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Windows Server 2003 Service Pack 2.
MORE INFORMATION
If the Event ID 467 error message cites a corrupted Unicode index, the following data is affected:
| Attribute Name | Index |
|---|---|
| displayName | INDEX_S_0002000D |
| servicePrincipalName | INDEX_00090303 |
If the Event ID 467 error message cites a corrupted ASCII index, the following data is affected:
| Attribute Name | Index |
|---|---|
| LegacyExchangeDN | INDEX_0009028F |
| msmqLabel | INDEX_0009039A |
The occurrence of the corruption in the ASCII indexes depends on the following factors:
- The sequence of changes to attribute values in the index
- The changes to the C runtime locale in the LSASS.exe process that occur between the index changes
These dependencies are complex. Therefore, the occurrence of the problem is not deterministic.
Additional query words: index database kbWinServ2003preSP2fix
Keywords: kbwinserv2003sp2fix kbbug kbfix kbpubtypekc kbhotfixserver kbqfe KB902396
