|
I did a quick search on “Internal Error” and “Active Directory”
Came up with this as possible reference.
http://support.microsoft.com/?kbid=265090
Under Jet Error Codes a 1017 is a record deleted error.
http://support.microsoft.com/?kbid=172570
Joe, Eric and I discussed the best DR options you have for corrupt Domain Controllers in the past. If the server isn’t your last DC, it is probably best to remove the DC, clean-up the AD, and then reinstall the DC. I know you said you are looking for a why and not to rebuild, but if your DC is unresponsive or has corrupted information, do you want to risk reintroducing it to your AD?
If it is your last DC, you probably are more concerned about getting the objects our of it, and repopulated into a working DC. Which I am sure you are more than versed in the various ways of doing. Do you still have the benefit of using those great products from your former employer?
Todd Myrick
From: Darren Mar-Elia
[mailto:[EMAIL PROTECTED]
Booted up VMware with DC (2003, SP1) on it yesterday and got an "internal error" on AD at start, forcing a reboot. Went into DSRM and ran semantic checker in ntdsutil. Checker returned error:
Records scanned: 1200Error fetching security descriptor [ Jet Error -1017]
which, upon searching out that error code, indicates the "record has been deleted". Thanks...
"Go Fixup" fails similarly. As this is just a test server, I'm not too bummed, although I would love to not have to reinstall the OS. In any case, anyone seen this and know any nifty tricks to recover from it?
Darren
|
