Directory Services Restore issue

[LucyMR]

I am working on restoring a W2K Domain Controller using BackupExec 9.1 and
restoring in Directory Services Restore Mode. I have already successfully
restored on Domain controller and am working on getting the second one
installed.

The restore fails, and says it cannot restore Active Directory. When the
machine is then rebooted, it will not allow you to log into windows. The
following message appears, right before the point where you would normally
see the login box:

lsass.exe - System Error: Directory Services could not start because of the
following error. The system cannot find the file specified. Error status:
0xc00000f. Please click OK [your only option] to shutdown this system and
reboot into Directory Services Restore Mode, check the event log for more
detailed information.

The event log holds these two specific errors:

Event ID: 1168
Source: NTDS
Category: Internal Processing
Error -1811 (fffff8ed) has occurred (Internal ID 404ab). Contact Microsoft
Product Support Services for assistance.

Event ID: 1003
Source: NTDS
Category: Internal Processing
The windows Directory Service Database could not be initialized and returned
error -1811. Unrecoverable error, the directory cannot continue.


I am wondering if there is something that I am just not doing right. I have
the machine in directory services restore mode, and the backup exec agent
has been successfully installed prior to this problem. Data is transfered,
but it will not restore active directory. It doesn't give a reason. I am
restoring the C and D partition, and the system state.

Has anyone come across this type of thing before? I cannot rule out that
the backup is bad. If that's the case I have whole different problem!

Any ideas anyone can offer would be appreciated.

 

[Paul Bergson]

Not sure if I'm following it all, but if you have successfully restored
Directory Services on one of your DC's and made it authoritative then that
is all you want to do. Replication will handle the rest of the dc's.

 

[LucyMR]

What I am trying to do is work on a disaster recovery model. I am actually
following the setup of the previous Sys Admin who is no longer here.

What we are trying to do is do a full restore of both domain controllers.
One has primary DNS, the other sencondary and so on with certain services,
such as DHCP, which hands out different ranges of IPs based on the server
that authenticates.

I restored the first DC from a full backup, so that the system is exactly as
it was when it was backed up to tape. I am trying to do the same with the
second, but it is not working.

Does that help clarify?

Not sure if I'm following it all, but if you have successfully restored
Directory Services on one of your DC's and made it authoritative then that
is all you want to do. Replication will handle the rest of the dc's.

--

Paul Bergson MCT, MCSE, CNE, CNA, CCA

All information is as is, no guarantees. Use at your own risk.

I am working on restoring a W2K Domain Controller using BackupExec 9.1 and
restoring in Directory Services Restore Mode. I have already successfully
restored on Domain controller and am working on getting the second one
installed.

The restore fails, and says it cannot restore Active Directory. When the
machine is then rebooted, it will not allow you to log into windows. The
following message appears, right before the point where you would normally
see the login box:

lsass.exe - System Error: Directory Services could not start because of the
following error. The system cannot find the file specified. Error status:
0xc00000f. Please click OK [your only option] to shutdown this system and
reboot into Directory Services Restore Mode, check the event log for more
detailed information.

The event log holds these two specific errors:

Event ID: 1168
Source: NTDS
Category: Internal Processing
Error -1811 (fffff8ed) has occurred (Internal ID 404ab). Contact Microsoft
Product Support Services for assistance.

Event ID: 1003
Source: NTDS
Category: Internal Processing
The windows Directory Service Database could not be initialized and returned
error -1811. Unrecoverable error, the directory cannot continue.


I am wondering if there is something that I am just not doing right. I have
the machine in directory services restore mode, and the backup exec agent
has been successfully installed prior to this problem. Data is transfered,
but it will not restore active directory. It doesn't give a reason. I am
restoring the C and D partition, and the system state.

Has anyone come across this type of thing before? I cannot rule out that
the backup is bad. If that's the case I have whole different problem!

Any ideas anyone can offer would be appreciated.

 

[Tim Hines [MSFT]]

The error that you are receiving indicates that the directory service files
are missing or they are not located in the correct location. Verify that
the ntds.dit and its associated log files are in the correct directory. You
can boot in DS restore mode and use ntdsutil to determine where the files
should be located. The following articles may be helpful.

300425 HOWTO: How to troubleshoot LSASS.EXE errors on Domain Controller Boot
http://support.microsoft.com/?id=300425

240362 Directory Services Does Not Start If Ntds.dit File Is Missing
http://support.microsoft.com/?id=240362


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

What I am trying to do is work on a disaster recovery model. I am actually
following the setup of the previous Sys Admin who is no longer here.

What we are trying to do is do a full restore of both domain controllers.
One has primary DNS, the other sencondary and so on with certain services,
such as DHCP, which hands out different ranges of IPs based on the server
that authenticates.

I restored the first DC from a full backup, so that the system is exactly as
it was when it was backed up to tape. I am trying to do the same with the
second, but it is not working.

Does that help clarify?

Not sure if I'm following it all, but if you have successfully restored
Directory Services on one of your DC's and made it authoritative then that
is all you want to do. Replication will handle the rest of the dc's.

--

Paul Bergson MCT, MCSE, CNE, CNA, CCA

All information is as is, no guarantees. Use at your own risk.

I am working on restoring a W2K Domain Controller using BackupExec 9.1 and
restoring in Directory Services Restore Mode. I have already successfully
restored on Domain controller and am working on getting the second one
installed.

The restore fails, and says it cannot restore Active Directory. When the
machine is then rebooted, it will not allow you to log into windows. The
following message appears, right before the point where you would normally
see the login box:

lsass.exe - System Error: Directory Services could not start because

of
the

following error. The system cannot find the file specified. Error status:
0xc00000f. Please click OK [your only option] to shutdown this system and
reboot into Directory Services Restore Mode, check the event log for more
detailed information.

The event log holds these two specific errors:

Event ID: 1168
Source: NTDS
Category: Internal Processing
Error -1811 (fffff8ed) has occurred (Internal ID 404ab). Contact Microsoft
Product Support Services for assistance.

Event ID: 1003
Source: NTDS
Category: Internal Processing
The windows Directory Service Database could not be initialized and returned
error -1811. Unrecoverable error, the directory cannot continue.


I am wondering if there is something that I am just not doing right.

I
have

the machine in directory services restore mode, and the backup exec agent
has been successfully installed prior to this problem. Data is transfered,
but it will not restore active directory. It doesn't give a reason.

I

am

 

[LucyMR]

The first link you provided does not seem to exist.

The second, however, does seem to have a solution for me and I will check it
out.

Thanks!

The error that you are receiving indicates that the directory service files
are missing or they are not located in the correct location. Verify that
the ntds.dit and its associated log files are in the correct directory. You
can boot in DS restore mode and use ntdsutil to determine where the files
should be located. The following articles may be helpful.

300425 HOWTO: How to troubleshoot LSASS.EXE errors on Domain Controller Boot
http://support.microsoft.com/?id=300425

240362 Directory Services Does Not Start If Ntds.dit File Is Missing
http://support.microsoft.com/?id=240362


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

What I am trying to do is work on a disaster recovery model. I am actually
following the setup of the previous Sys Admin who is no longer here.

What we are trying to do is do a full restore of both domain controllers.
One has primary DNS, the other sencondary and so on with certain services,
such as DHCP, which hands out different ranges of IPs based on the server
that authenticates.

I restored the first DC from a full backup, so that the system is

exactly

as
it was when it was backed up to tape. I am trying to do the same with the
second, but it is not working.

Does that help clarify?


9.1
and When
the

because

of

the
following error. The system cannot find the file specified. Error
status:
0xc00000f. Please click OK [your only option] to shutdown this

system
and

reboot into Directory Services Restore Mode, check the event log for more
detailed information.

The event log holds these two specific errors:

Event ID: 1168
Source: NTDS
Category: Internal Processing
Error -1811 (fffff8ed) has occurred (Internal ID 404ab). Contact
Microsoft
Product Support Services for assistance.

Event ID: 1003
Source: NTDS
Category: Internal Processing
The windows Directory Service Database could not be initialized and
returned
error -1811. Unrecoverable error, the directory cannot continue.


I am wondering if there is something that I am just not doing right. I
have
the machine in directory services restore mode, and the backup exec agent
has been successfully installed prior to this problem. Data is
transfered,
but it will not restore active directory. It doesn't give a reason.

I

am
restoring the C and D partition, and the system state.

Has anyone come across this type of thing before? I cannot rule out that
the backup is bad. If that's the case I have whole different problem!

Any ideas anyone can offer would be appreciated.