Ok, now that i could recover the partition where the ntds.dit file was, i think i 
might be able to use it again...what happens if i change the registry property from 
WinNT back to LanmanNT?? can i do that? will that work?

Thanks

-----Mensaje original-----
De: joe [mailto:[EMAIL PROTECTED]
Enviado el: domingo, 01 de agosto de 2004 14:06
Para: [EMAIL PROTECTED]
Asunto: RE: [ActiveDir] urgent help needed


I just reread this... I'm surprised Dean or ~Eric didn't respond to this. I
blew the value of producttype for an AD server, it is actually LanmanNT, not
WinNT. WinNT is what clients have set. 

  joe 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Friday, July 30, 2004 11:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] urgent help needed

Are you sure the DIT file is gone? If so and you have no systemstate backups
and you don't have any other DCs for that domain your only choice is a
forced demotion of the DC. See the following KB

http://support.microsoft.com/default.aspx?kbid=332199


If I recall though you can't do that from single user mode so you will have
to do the following unsupported hack:

Go to the following registry value:

hklm\system\currentcontrolset\control\productoptions\producttype 

Change it from WinNT to ServerNT


After you do this, you will want to promote the DC into a fake domain and
demote it again so that it reconfigures everything properly on the machine. 


It is possible to create an empty DIT file but it will do nothing for you.
There is a huge difference between an empty DIT file and a properly built
DIT file with no user defined objects. The former is easy, the latter is
not. You have to repromote the DC to get it.


I will step up on the podium for a second...

1. Always have multiple DCs. 
2. If you can't follow number 1, have a systemstate backup that you know is
good and still always have multiple DCs.


I am wondering why you are so worried about rebuilding the DC, my guess is
that you have some other app or apps loaded. It really isn't good security
(or any security at all honestly) to run DCs as app servers. There are a
couple of infrastructure services that are generally ok to run, but as a
whole, don't run apps on DCs. 


  joe



 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alicia Szerenyi
Sent: Friday, July 30, 2004 11:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] urgent help needed

Dennis, i appreciate you're help, but the solutions that are suggested in
the link you gave me wont't work...the last suggestion was to reinstall the
operating system, what i am trying not to do...

Does anybody have any idea how to solve my problem?

When i try to boot in normal mode there is an error message saying the
directory service can't be started...then, when i check the integrity of the
files with ntdsutil some errors occure, the last one being
"E:\winnt\ntds\ntds.dit file does not exist"...

it must be possible to create a new empty ntds.dit file...or any other
solution!!

Thank you
Alicia


-----Mensaje original-----
De: Depp, Dennis M. [mailto:[EMAIL PROTECTED] Enviado el: viernes, 30 de
julio de 2004 11:37
Para: [EMAIL PROTECTED]
Asunto: RE: [ActiveDir] urgent help needed


Alicia,

Check out http://support.microsoft.com/default.aspx?scid=kb;en-us;265089,
senario 2.

Dennis   

 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alicia Szerenyi
Sent: Friday, July 30, 2004 10:20 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] urgent help needed
Importance: High

Hello, 

> i am having trouble with active directory...the database file ntds.dit 
> was
erased because of a power failure we had some days ago. The active directory
was working perfectly until that day, and now windows 2000 won't start. The
only way we have to access the machine is through DS restore mode.
> 
> We can't uninstall AD because we are not on normal mode...and we don't
have a back up for that file.
> 
> Is there any way i can create a new empty database to start over? or 
> is
there a way to eliminate AD from the server without having to format the
drive and install windows 2000? 
> 
> Is it possible to create the ntds.dit file and any other needed? 
> Doesn't
AD have that functionality?
> 
> We need to have the server working again as soon as possible. We don�t
mind eliminating anything related to Active Directory, but we don't want to
format the drive and re-install de operating system again...
> 
> Please help me
> Thank you very much
> 
> 
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to