I did a quick search on Internal
Error and Active Directory
Came up with this as possible
reference.
http://support.microsoft.com/?kbid=265090
Under Jet Error Codes a 1017 is a record
deleted error.
http://support.microsoft.com/?kbid=172570
Joe, Eric and I discussed the best DR
options you have for corrupt Domain Controllers in the past. If the
server isnt your last DC, it is probably best to remove the DC, clean-up
the AD, and then reinstall the DC. I know you said you are looking for a
why and not to rebuild, but if your DC is unresponsive or has corrupted
information, do you want to risk reintroducing it to your AD?
If it is your last DC, you probably are
more concerned about getting the objects our of it, and repopulated into a
working DC. Which I am sure you are more than versed in the various ways
of doing. Do you still have the benefit of using those great products
from your former employer?
Todd Myrick
From: Darren Mar-Elia
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 13, 2006 10:20
AM
To: activedir@mail.activedir.org
Subject: [ActiveDir] corrupt
vmware DC
Booted up VMware with DC (2003, SP1)on it yesterday
and got an internal error on AD at start, forcing a reboot. Went
into DSRM and ran semantic checker in ntdsutil. Checker returned error:
Records scanned:
1200Error fetching security descriptor [ Jet Error -1017]
which, upon searching out that error code, indicates the
record has been deleted. Thanks...
Go Fixupfails similarly. As this is just a
test server, I'm not too bummed, although I would love to not have to reinstall
the OS. In any case, anyone seen this and know any nifty tricks to recover from
it?
Darren
