Err Msg: Security Accounts Manager Initialization Failed Because of the Following Error: Directory Service Cannot Start (240655)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q240655

SYMPTOMS

When a domain controller is started, the following error message may be displayed:
Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.
If you click OK, the computer restarts.

CAUSE

This behavior can occur if you mark objects in Active Directory as authoritative using the Ntdsutil tool, and then restore Active Directory from a backup. This is the incorrect order in which to perform these steps.

RESOLUTION

To resolve this issue:
  1. Boot into Directory Services Restore Mode.
  2. Restore Active Directory from a back-up tape.
  3. Restart the domain controller normally.

A simplified breakdown of the procedure to authoritatively restore Active Directory objects follows. For additional information refer to Windows Help or click the article number below to view the article in the Microsoft Knowledge Base:

216243 The effects on trusts and computer accounts when you authoritatively restore Active Directory

  1. Boot into Directory Services Restore Mode.
  2. Restore Active Directory from a back-up tape.
  3. Using the Ntdsutil tool, mark the selected Active Directory object (or tree of objects) as authoritative.
  4. Restart the domain controller normally.
Modification Type:MajorLast Reviewed:7/11/2006
Keywords:kbenv kbprb KB240655
©2004 Microsoft Corporation. All rights reserved.