Active Directory is Rebuilding Indices

Hello all,

Active Directory is Rebuilding Indices (and driving me insane!).

Any idea what this means? It's happened twice now in the past two months on
a scheduled nightly reboot. It did happen once over a year ago. It's
bothering me that it's happened twice.

It just keeps running and never finishes whatever it is doing. We end up
doing a hard boot and it runs just fine after that.

Windows Small Business Server 2003 SP2.

Steve
--
Making Technology Easier
-
Steven Cox
Mectek Technology Resources
Louisville, KY 40220

Hello,

Thank you for posting here.

According to your description, I understand that:

In the past two months, the SBS 2003 server prompts the message "Active
Directory is Rebuilding Indices" and hangs. It never finishes before you
reset the server.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
===========================

There are two processes that are involved with the rebuilding indices
message. Winlogon.exe and DBINIT. Winlogon is the messenger (it displays
the rebuilding indices message) and it is waiting on a signal from DBINIT
that the "rebuilding indices" process in completed

During the startup process on a domain controller Winlogon will display
"The Active Directory is rebuilding indices. Please wait..." Winlogon will
wait indefinitely
for DBINIT to signal that the rebuilding indices process in completed. If
the signal from the DBINIT rebuilding indices process is already present
when Winlogon
messages "The Active Directory is rebuilding indices. Please wait..." you
will probably not see the message as Winlogon will immediately move on and
message "Preparing network connections...".
To correct the issue, you may check:

1.Make sure the Eventlog service is started.


2. As the issue may be related to Password Change Notification Service
(PCNS), please check whether KB 931211 has been installed on the SBS
server. If not, you may get the update from:

The AuthzInitializeContextFromSid function fails or the Microsoft Password
Change Notification Service cannot synchronize password changes in Windows
Server 2003
http://support.microsoft.com/kb/931211

3. In most instances you may add the Eventlog service as a dependency of
RPCSS. This will cause RPCSS to start the Eventlog service and potentially
eliminate the rebuilding indices wait. To do that:

Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\RpcSs

Add a Reg_Multi_Sz with the name as DependOnService the add to Eventlog to
the data list for DependOnService

4. Moreover, I'd like to know whether you set auditing on the HKLM key.
There is a known issue that the message hangs due to excessive auditing.
Please make sure that there is no auditing that i set to Everyone for
Success and Failures on the HKLM key. If there is, you may have a test to
check how it works if you remove it.

As I mentioned above, the issue results from the between the two processes.
So the best way troubleshoot a rebuilding indices issue is to collect a
full dump of the machine and review the DBINIT function to determine what
point in the function has been reached. Unfortunately, debugging is beyond
what we can do in the forum. A suggestion would be to contact Microsoft
Customer Service and Support (CSS) via telephone so that a dedicated
Support Professional can assist with your request. Please be advised that
contacting phone support will be a charged call.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below:

http://support.microsoft.com/default...roPhone#faq607

I hope the problem will be resolved soon. Thank you for your time and
cooperation!

(Please note that the newsgroups are staffed weekdays by Microsoft Support
professionals to answer your non-urgent, break/fix systems and applications
questions. Our goal is to provide 24 hour response to all questions. If
this response time does not meet your needs, please contact Customer
Service and Support (CSS) for more immediate assistance. For more
information on available CSS services, please click here:
http://support.microsoft.com/default...roPhone#faq607
.)

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.





Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Thank you for your answer. I will try these things over the next few days. I
won't be able to hang around after hours until tomorrow, so that's when I'll
start checking things out.

Steve

"Miles Li [MSFT]" <v-> wrote in message
news:...
> Hello,
>
> Thank you for posting here.
>
> According to your description, I understand that:
>
> In the past two months, the SBS 2003 server prompts the message "Active
> Directory is Rebuilding Indices" and hangs. It never finishes before you
> reset the server.
>
> If I have misunderstood the problem, please don't hesitate to let me know.
>
> Suggestions:
> ===========================
>
> There are two processes that are involved with the rebuilding indices
> message. Winlogon.exe and DBINIT. Winlogon is the messenger (it displays
> the rebuilding indices message) and it is waiting on a signal from DBINIT
> that the "rebuilding indices" process in completed
>
> During the startup process on a domain controller Winlogon will display
> "The Active Directory is rebuilding indices. Please wait..." Winlogon will
> wait indefinitely
> for DBINIT to signal that the rebuilding indices process in completed. If
> the signal from the DBINIT rebuilding indices process is already present
> when Winlogon
> messages "The Active Directory is rebuilding indices. Please wait..." you
> will probably not see the message as Winlogon will immediately move on and
> message "Preparing network connections...".
> To correct the issue, you may check:
>
> 1.Make sure the Eventlog service is started.
>
>
> 2. As the issue may be related to Password Change Notification Service
> (PCNS), please check whether KB 931211 has been installed on the SBS
> server. If not, you may get the update from:
>
> The AuthzInitializeContextFromSid function fails or the Microsoft Password
> Change Notification Service cannot synchronize password changes in Windows
> Server 2003
> http://support.microsoft.com/kb/931211
>
> 3. In most instances you may add the Eventlog service as a dependency of
> RPCSS. This will cause RPCSS to start the Eventlog service and potentially
> eliminate the rebuilding indices wait. To do that:
>
> Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\RpcSs
>
> Add a Reg_Multi_Sz with the name as DependOnService the add to Eventlog to
> the data list for DependOnService
>
> 4. Moreover, I'd like to know whether you set auditing on the HKLM key.
> There is a known issue that the message hangs due to excessive auditing.
> Please make sure that there is no auditing that i set to Everyone for
> Success and Failures on the HKLM key. If there is, you may have a test to
> check how it works if you remove it.
>
> As I mentioned above, the issue results from the between the two
> processes.
> So the best way troubleshoot a rebuilding indices issue is to collect a
> full dump of the machine and review the DBINIT function to determine what
> point in the function has been reached. Unfortunately, debugging is beyond
> what we can do in the forum. A suggestion would be to contact Microsoft
> Customer Service and Support (CSS) via telephone so that a dedicated
> Support Professional can assist with your request. Please be advised that
> contacting phone support will be a charged call.
>
> To obtain the phone numbers for specific technology request please take a
> look at the web site listed below:
>
> http://support.microsoft.com/default...roPhone#faq607
>
> I hope the problem will be resolved soon. Thank you for your time and
> cooperation!
>
> (Please note that the newsgroups are staffed weekdays by Microsoft Support
> professionals to answer your non-urgent, break/fix systems and
> applications
> questions. Our goal is to provide 24 hour response to all questions. If
> this response time does not meet your needs, please contact Customer
> Service and Support (CSS) for more immediate assistance. For more
> information on available CSS services, please click here:
> http://support.microsoft.com/default...roPhone#faq607
> )
>
> Hope it helps. If you have any questions or concerns, please do not
> hesitate to let me know.
>
>
>
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>

Have you googled for ideas? I see one old post where a bad USB drive
connected at boot was causing this (seems strange though).

--
Allan Williams



"Steven Cox" <> wrote in message
news:BE5542E3-50E1-42C9-BAA9-...
> Hello all,
>
> Active Directory is Rebuilding Indices (and driving me insane!).
>
> Any idea what this means? It's happened twice now in the past two months
> on a scheduled nightly reboot. It did happen once over a year ago. It's
> bothering me that it's happened twice.
>
> It just keeps running and never finishes whatever it is doing. We end up
> doing a hard boot and it runs just fine after that.
>
> Windows Small Business Server 2003 SP2.
>
> Steve
> --
> Making Technology Easier
> -
> Steven Cox
> Mectek Technology Resources
> Louisville, KY 40220
>
>

Hello Steve,

Thanks for the update.

Please take your time to have the test. If you have any further questions
or concerns, please do not hesitate to let me know. I will follow up as
soon as possible.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Miles,

I applied the KB and did the Registry edit. One or the other will probably
fix it. However you did ask if I had set auditing on the HKLM key. To be
honest I wouldn't know how. Can you tell me how to check that?

Thanks for your help!

Steve

"Miles Li [MSFT]" <v-> wrote in message
news:...
> Hello,
>
> Thank you for posting here.
>
> According to your description, I understand that:
>
> In the past two months, the SBS 2003 server prompts the message "Active
> Directory is Rebuilding Indices" and hangs. It never finishes before you
> reset the server.
>
> If I have misunderstood the problem, please don't hesitate to let me know.
>
> Suggestions:
> ===========================
>
> There are two processes that are involved with the rebuilding indices
> message. Winlogon.exe and DBINIT. Winlogon is the messenger (it displays
> the rebuilding indices message) and it is waiting on a signal from DBINIT
> that the "rebuilding indices" process in completed
>
> During the startup process on a domain controller Winlogon will display
> "The Active Directory is rebuilding indices. Please wait..." Winlogon will
> wait indefinitely
> for DBINIT to signal that the rebuilding indices process in completed. If
> the signal from the DBINIT rebuilding indices process is already present
> when Winlogon
> messages "The Active Directory is rebuilding indices. Please wait..." you
> will probably not see the message as Winlogon will immediately move on and
> message "Preparing network connections...".
> To correct the issue, you may check:
>
> 1.Make sure the Eventlog service is started.
>
>
> 2. As the issue may be related to Password Change Notification Service
> (PCNS), please check whether KB 931211 has been installed on the SBS
> server. If not, you may get the update from:
>
> The AuthzInitializeContextFromSid function fails or the Microsoft Password
> Change Notification Service cannot synchronize password changes in Windows
> Server 2003
> http://support.microsoft.com/kb/931211
>
> 3. In most instances you may add the Eventlog service as a dependency of
> RPCSS. This will cause RPCSS to start the Eventlog service and potentially
> eliminate the rebuilding indices wait. To do that:
>
> Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\RpcSs
>
> Add a Reg_Multi_Sz with the name as DependOnService the add to Eventlog to
> the data list for DependOnService
>
> 4. Moreover, I'd like to know whether you set auditing on the HKLM key.
> There is a known issue that the message hangs due to excessive auditing.
> Please make sure that there is no auditing that i set to Everyone for
> Success and Failures on the HKLM key. If there is, you may have a test to
> check how it works if you remove it.
>
> As I mentioned above, the issue results from the between the two
> processes.
> So the best way troubleshoot a rebuilding indices issue is to collect a
> full dump of the machine and review the DBINIT function to determine what
> point in the function has been reached. Unfortunately, debugging is beyond
> what we can do in the forum. A suggestion would be to contact Microsoft
> Customer Service and Support (CSS) via telephone so that a dedicated
> Support Professional can assist with your request. Please be advised that
> contacting phone support will be a charged call.
>
> To obtain the phone numbers for specific technology request please take a
> look at the web site listed below:
>
> http://support.microsoft.com/default...roPhone#faq607
>
> I hope the problem will be resolved soon. Thank you for your time and
> cooperation!
>
> (Please note that the newsgroups are staffed weekdays by Microsoft Support
> professionals to answer your non-urgent, break/fix systems and
> applications
> questions. Our goal is to provide 24 hour response to all questions. If
> this response time does not meet your needs, please contact Customer
> Service and Support (CSS) for more immediate assistance. For more
> information on available CSS services, please click here:
> http://support.microsoft.com/default...roPhone#faq607
> )
>
> Hope it helps. If you have any questions or concerns, please do not
> hesitate to let me know.
>
>
>
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>

Hello Steve,

To check the auditing on HKLM key, you may:

1. On the SBS server, run "regedit" to open the Registry Editor.
2. Locate the HKEY_LOCAL_MACHINE and right
click--->Permissions--->Advanced--->Auditing tab.
3. Please verify whether there is any auditing entries. If yes, you may
temporarily disable them to check how it works.

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks Miles!

I'm sure this will fix it.



"Miles Li [MSFT]" <v-> wrote in message
news:...
> Hello Steve,
>
> To check the auditing on HKLM key, you may:
>
> 1. On the SBS server, run "regedit" to open the Registry Editor.
> 2. Locate the HKEY_LOCAL_MACHINE and right
> click--->Permissions--->Advanced--->Auditing tab.
> 3. Please verify whether there is any auditing entries. If yes, you may
> temporarily disable them to check how it works.
>
> Hope it helps. If you have any questions or concerns, please do not
> hesitate to let me know.
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>

Hi Steven,

I am glad that the information can be of assistance.

You may keep monitoring this issue for a while. If you need any further
assistance, please feel free to post back. It is always my pleasure to be
of help.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks! So far so good. No problems of any kind on the server the past few
weeks.

I really appreciate the invaluable help!

Steve

"Miles Li [MSFT]" <v-> wrote in message
news:...
> Hello Steve,
>
> To check the auditing on HKLM key, you may:
>
> 1. On the SBS server, run "regedit" to open the Registry Editor.
> 2. Locate the HKEY_LOCAL_MACHINE and right
> click--->Permissions--->Advanced--->Auditing tab.
> 3. Please verify whether there is any auditing entries. If yes, you may
> temporarily disable them to check how it works.
>
> Hope it helps. If you have any questions or concerns, please do not
> hesitate to let me know.
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>