Re: LSASS.EXE Crashes Domain Controller
From: Rick (na_at_na.com)
Date: 02/20/04
- Next message: John: "connecting 2 windows 2000 domains"
- Previous message: Active Directory Newbie: "Re: DNS Zone Files"
- In reply to: Rick: "LSASS.EXE Crashes Domain Controller"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 19 Feb 2004 19:21:14 -0500
Ok I have come to the conclusion that my active directory partition is
corrupt. Anyone know the best way to repair this. In reading it looks like
the following steps should repair my issues
1. Boot to Active Directory Restore mode.
2. Open a CMD prompt and perform an integrity check by typing:
esentutl /g "<path>\ntds.dit"/!10240 /8 /v /x /o
3. Repair the database by typing:
esentutl /p "<path>\ntds.dit" /!10240 /8 /v /x /o
4. Delete the database log files from the Ntds folder.
5. Restart your Server.
The question is do I need to do this on every DC or can I do it to one and
the repairs will be replicated?
Anyone here have experience with this AD corruption? Any input on this would
be greatly appreciated.
"Rick" <na@na.com> wrote in message
news:%23$rN73u9DHA.1596@TK2MSFTNGP10.phx.gbl...
> Yet another issue (you have to love cleaning up someone else's mess) on
the
> network here. Have a windows 2003 domain controller with all current
> patches. Hardware is as follows
> Dell 4400 dual GHZ P3 Xeon
> 4 Intel cards teamed
> 3.5 GB memory
> 18GB boot mirrored pair
> 150 GB data Raid 5 array
> on a Cisco Catalyst 3500 XL switch.
>
> I modified the boot.ini to include the /3GB /Usera=3030 switch per a
> Microsoft KB article about AD cache in large environments. However this
did
> not even slow down the LSASS crashing which I thought it would do that. I
> watch the memory usage and it grows steady to about 50 to 60 megs which
> should not be an issue. I have not been able to catch it much above 60
megs
> as it crashes close to this point. However when LSASS closes it is closing
> with memory exceptions (could it be bad memory?). Or is it possible for
the
> AD database to get corrupted and the DC still boot.
>
> I am seriously considering demoting this server back to a member server,
> removing it from the domain and reformatting. The issue though is the
> permissions for all the files on the raid data drive. I want to be sure
that
> those permissions are retained so that they will not have to be recreated.
> If I remember correctly these permissions should be part of NTFS on that
> drive so there should be no issue with formatting the system volume. If I
> understand correctly I will have to recreate the shares and share
> permissions after reformat because this is stored on the system volume? I
am
> also planning on doing a backup of the data files prior to the reformat
> (always better to be safe the sorry).
>
> Any comments or suggestions are greatly appreciated as always.
>
> Rick
>
>
- Next message: John: "connecting 2 windows 2000 domains"
- Previous message: Active Directory Newbie: "Re: DNS Zone Files"
- In reply to: Rick: "LSASS.EXE Crashes Domain Controller"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
