Fix: Active directory corrupted (NTDS ISAM Database Corruption errors in eventlog)
follow procedure below fix microsoft active directory database problems (corrupted active directory due e.g memory issues/disk problems):
1. reboot server , press f8. choose directory services restore mode menu.
2. check physical location of winnt\ntds\ folder.
3. check permissions on \winnt\ntds folder. default permissions are: administrators – full control system – full control
4. check winnt\sysvol\sysvol folder make sure shared.
5. check permissions on winnt\sysvol\sysvol share. default permissions are: share permissions: —————— administrators – full control authenticated users – full control – read ntfs permissions: —————– administrators – full control authenticated users – read & execute, list folder contents, read creator owner – none server operators – read & execute, list folder contents, read system – full control note: may not able change permissions on these folders if active directory database unavailable because damaged, best know if permissions set correctly before start recovery process, may not database problem.
6. make sure there folder in sysvol share labeled correct name domain.
7. open command prompt , run ntdsutil verify paths ntds.dit file. these should match physical structure step 2. check file paths type following commands: start command prompt ntdsutil files info output should similar to: drive information: c:\ ntfs (fixed drive) free (2.9 gb) total (3.9 gb) d:\ ntfs (fixed drive) free (3.6 gb) total (3.9 gb) ds path information: database : c:\winnt\ntds\ntds.dit – 10.1 mb backup dir: c:\winnt\ntds\dsadata.bak working dir: c:\winnt\ntds log dir : c:\winnt\ntds – 30.0 mb total res2.log – 10.0 mb res1.log – 10.0 mb edb.log – 10.0 mb information pulled directly registry , mismatched paths cause active directory not start. type quit end ntdsutil session.
8. rename edb.chk file , try boot normal mode. if fails, proceed next steps.
9. reboot directory services restore mode again. @ command prompt, use esentutl check integrity of database. note: can use ntdsutil check integrity, esentutl more reliable. type following command: esentutl /g “\ntds.dit” /!10240 /8 /v /x /o (note: type path without quotes). note: default path c:\winnt\ntds\ntds.dit; may different in cases. output tell if database inconsistent , may produce jet_error 1206 stating database corrupt. if database inconsistent or corrupt need recovered or repaired . recover database type following @ command prompt: ntdsutil files recover if fails error, type quit until @ command prompt , repair database using esentutl typing following: esentutl /p “\ntds.dit” /!10240 /8 /v /x /o (note: type path without quotes). note: if not put switches @ end of command jet_error 1213 “page size mismatch” error.
10. delete log files in ntds directory, not delete or move ntds.dit file.
11. ntdsutil tool needs run again check integrity of database , perform semantic database analysis. check integrity, @ command prompt type: ntdsutil files integrity output should tell integrity check completed , prompt should perform semantic database analysis. type quit. perform semantic database analysis type following @ ntdsutil prompt type: semantic database analysis go output tell analysis completed successfully. type quit , closes command prompt. note: if errors running analysis type following @ semantic checker prompt: semantic checker: go fix puts checker in fixup mode, should fix whatever errors there were.
12. reboot server normal mode. if of these steps fail recover database alternative perform authoritative system state restore backup in directory services restore mode. more information, please refer following articles: 315136 how to: complete semantic database analysis active directory http://support.microsoft.com/?id=315136 265706 dcdiag , netdiag in windows 2000 facilitate domain join , dc creation http://support.microsoft.com/?id=265706 258007 error message: lsass.exe – system error : security accounts manager http://support.microsoft.com/?id=258007 265089 event 1168: windows 2000 dcs unable boot active directory http://support.microsoft.com/?id=265089 315131 how to: use ntdsutil manage active directory files command http://support.microsoft.com/?id=315131 br – frank
hi,
thanks sharing , detailed information on how fixed problem.
this solution benifit other users come see thread. if have questions in future, you're welcomed forum.
regards,
bruce
Windows Server > Directory Services
Comments
Post a Comment