Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Directory Services Restore Mode

Status
Not open for further replies.

TechBob99

Programmer
May 9, 2007
2
US
We have a domain with only one W2k Server, and it is totally isolated with no internet connectivity at all. The other day we got a message "Directory Services could not start because of the following error: There is not enough space on the disk..." But there is plenty of free space on each of the 2 drives.

This network was set up before I started here recently. Even before this happened, I had been looking at the event logs and there are plenty of DNS, GPO, and other strange errors shown. We logged in to the DS Restore Mode, since that is the only option. I've tried several ntdsutil commands and they all appear to complete successfully. We even tried to restore an old System State backup, but it was too old.

The strange thing is that this server doesn't recognize the domain. When you go the the Network Identification tab, it just shows the domain as "Unknown", and the properties button is disabled. I think this is they key to the whole mess. Could this "unknown" domain be because it's in safe mode when using the restore mode? If you browse the entire network, it lists this server under the domain AND in a workgroup. If you go to one of the workstations on this domain, it lists the server under the domain, but you obviously can't expand and browse the files.

I was just wondering if anybody has suggestions for now, rather than reinstalling Active Directory. It looks like there's more problems than just AD, so we would probably need to restore the Server OS from scratch. I think we're going to upgrade to Server 2003 soon because of this.
Also, this domain is isolated from the outside world, and the workstations on it are doing very specialized tasks. They're not using the server for any kind of data storage, so even with the corrupted AD, they're able to login using cached accounts, and function properly (so far!) despite the server problems. They don't reboot these workstations very often.

Any tips would be appreciated. Thank you!
 
I would say, that you have not reached any of the AD limits :) so maybe there is some problem with creating transaction log files, check at least the permissions for the folder where you store the tx logs (edb*.log) or try offline defrag of the database file (ntds.dit)
 
piti-

I had already checked the NTDS folder and files and they had the proper permissions. Also, I did an offline defrag of ntds.dit and that completed, and didn't show any errors. But it still didn't change anything.

It looks like the main problem is that is the server doesn't recognize it's own domain. Without that, nothing with AD is going to work? The only way we can log in is in safe mode (DS Restore Mode), so we don't really have all of the normal functionality.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top