• Home
  • Consulting
  • Contact Us
    • About this site
    • Contact Wayne
    • Media Room
    • Wayne’s Bio

SBSFAQ.COM

Supporting IT Pro's & MSP's since 2000

  • Blog
  • FAQs
  • Reviews
  • Downloads

Disaster Recovery of older Active Directory Domain Controllers.

January 19, 2012 by Wayne Small 7 Comments

Today we were doing a  Disaster Recovery for a client.  Well not so much as a Disaster Recovery, but a recovery of old data from an old tape.  The tape was from April 2011.  The data we wanted to recover was from an NTBACKUP of Exchange 2003.  We needed to recover the CEOs Mailbox as he’d “lost” certain emails that were now considered important.

Anyway – we had a server similar to the original server and we commenced the rebuild of the server from tape.  The engineer I had working on it restored the entire C: drive as well as the other volumes needed. Upon reboot we were faced with an error below.

Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status 0xc000000f.

Ok – we checked the C:\Windows\NTDS folder and found that it was empty.  Which is to be expected as we’d not done a system state restore.  So we rebooted into DSRM mode and commenced a System State restore.  All looked good and we rebooted…. sadly we got this error message.

Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status 0xc00002e1.

A little investigation revealed this Microsoft KB article.  Unfortunately we got to step 9 in the procedure and ntdsutil files integrity command reported that the database was in fact corrupt.  Hmm we thought – let’s try an older tape, so we did another system state restore, which unfortunately failed with the same result.

Ok – so at this point I took a few steps back… I tried a few things that I probably should not have all of which did not work.  Then it dawned on me… tombstones… the backup we were restoring was nearly 9 months old.  The default tombstone period is 60 days… I’d never tried to restore such an old backup before and I wondered if the problem might in fact be the date now being 9 months later. 

The easy way to verify this was to jump into the BIOS and we set the date to 1 month AFTER the original backup.  We then rebooted into DSRM mode once more and did another system state restore.  Rebooted and crossed our fingers.  Yippee – it came up without an issue.  That must have been it.

So the take away from this is that when you are restoring older tapes, consider the date that the backup was done as well as the date that the machine has set in the BIOS.  This is one I won’t forget for a while now Smile

Share this:

  • Click to share on Facebook (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to print (Opens in new window)

Filed Under: Blog Tagged With: Active Directory, Disaster Recovery, Troubleshooting, Windows 2003

About The Author

Wayne has been working with Microsoft Server products in the SMB market for over 20 years. He has a passion for technology and been a Microsoft MVP for over 15 years. Read More…

Comments

  1. Maurizio says

    April 14, 2014 at 12:00 am

    Hi, same issue but while doing a SBS 2003 disaster (C: partition gone, damn!!!) recovery via Symantec Backup Exec Intelligent (? – why it didn’t warned me?!?!) Disaster Recovery. Again, let’s set the BIOS date 1 month after the backup date…
    …I’ll not forget it, also

    Reply
  2. exchange server data recovery says

    April 21, 2014 at 1:03 am

    Thanks for finally writing about > Disaster Recovery of older Active Directory Domain Controllers.
    < Loved it!

    Reply
  3. Exchange Server Data Recovery says

    April 21, 2014 at 1:04 am

    Heya i’m for the first time here. I came across this board and I find It truly useful
    & it helped me out much. I hope to give something back and aid others like you helped me.

    Reply
  4. http://pieroletizia.com/?p=1 says

    October 9, 2014 at 2:58 pm

    But if you carefully look at them, you will discover the fact that
    the safety of these toys depends on who is using them.

    Individuals are living longer and healthy lives today
    than ever before to is helping to shift the mindset about the topic too.
    As they grew up and changed, children in this era still
    appreciated furniture, clothes and cars.

    Reply
  5. family lawyers in Maryland says

    January 18, 2015 at 10:19 am

    Also visit mу site family lawyers in Maryland

    Reply
  6. Hugely Relieved says

    November 30, 2015 at 3:52 pm

    Setting the date back has absolutely saved my bacon. Thanks so much for this post. I had read 15-20 pages and this info was THE most valuable, possibly of keeping my career!
    Thank you!

    Reply
  7. Rajesh sharma says

    January 21, 2019 at 6:19 pm

    Nice article on Disaster Recovery of older Active Directory Domain Controllers. from many days I am searching for this type of article. But couldn’t find it. Know I got this article and really were happy to read it.

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search

Connect Online With Us

  • Facebook
  • Twitter

Reviews

Splashtop – Cost Effective Remote Control Software

September 22, 2017 By Wayne Small 2 Comments

Western Digital DL4100 NAS

March 3, 2015 By Wayne Small Leave a Comment

SBS 2011 Configuring Certification Guide (70-169)

August 7, 2012 By Wayne Small 4 Comments

Site News

Exchange Bug Stops Mail Delivery in 2022

January 2, 2022

Huge bug found in Intel CPU that could permit hackers to steal your data

January 4, 2018

Recent Posts

  • MS Exchange Zero Day and RemotePowerShell Disabling on Admin accounts
  • Setup changes for Exchange 2016 and Exchange 2019
  • Bluetooth Mouse and Keyboard Randomly Stop Responding
  • Exchange Bug Stops Mail Delivery in 2022
  • How to open and search extremely large text log files

Tags

Antivirus Backup Business Focus Cloud Computing Community Conferences Disaster Recovery Exchange 2010 Exchange Server Future Products Hyper-V Installation Microsoft Migration Patches Personal Rants SBS 4.5 SBS 2000 SBS 2000 SP1 SBS 2003 SBS 2003 Premium SBS 2003 R2 SBS 2003 R2 Premium SBS 2003 R2 Standard SBS 2003 SP1 Premium SBS 2003 SP1 Standard SBS 2003 Standard SBS 2008 SBS 2008 R2 SBS 2011 SBS 2011 Essentials SBS 2011 Standard Security Service Packs ShadowProtect SMB Community Software Software I use StorageCraft Training TrendMicro Troubleshooting Virtualisation Windows Server 2012 Essentials

Terms of Use

Privacy Policy

Copyright © 2023 · Magazine Pro Theme on Genesis Framework · WordPress · Log in