NTDS ISAM and NTDS SDPROP errors

I really need any help with this, I have a DC running Windows 2000 that
started to have problem with the replication and getting two errors all the
time. The first error is event ID 404 with the description below:
NTDS (280) Synchronous read page checksum error -1018 ((1:54555 1:54555)
(0-62152712) (0-72471798)) occurred. Please restore the databases from a
previous backup.

And then I get a second error with event ID 1262 with the description below:
The Security Descriptor Propagator has been abnormally terminated with error
code e0010004 while processing object

My Intrasite replications is working but the problem here is the Intersite
replication. I tried to demote the DC but got and error about the DS database
and the process failed.

I really appreciate any help with this.

 

Hi Ashraf.
You have a checksum problem on this page. That basically means, the page is
corrupt. More often than not, these sorts of corruptions bubble up from the
hardware layer. We push a lot of I/O, occasional bitflips in hardware
happen!

The best step for this would be to simply offline defrag the database. If
the corruption is in, say, a secondary index....you'll recover. If an
offline defrag doesn't fix you, I'd suggest you repromote this box and
dcpromo it off of one of your other DCs. No reinstall is likely required,
just demote and then promote the box again should be fine.

Sorry it isn't better news.
~Eric

 

Thanks Eric for you answer but I have two questions, first to do off line
defrage, I have to go to the DSR mode and do disk defrag or there is a
command to do it only for the database.
Second, how could I demote the server when I'm getting the errors on the
dcpromo wizzard?

 

Yes, a defrag would be done in DS restore mode.
Oh, no, not a disk defrag. This would be a database defrag. You'd use
esentutl /d for this.

To demote, you can use dcpromo /forceremoval.

~Eric

--
Eric Fleischman [MSFT]
Microsoft Windows Server Division
This post is provided "AS IS" with no warranties, and confers no rights

 

If you do the /forceremoval, you will need to cleanup the DC - follow
kb216498.

For instructions on how to perform the defrag of the DIT, refer to kb232122.
Use NTDSUTIL first. Only use ESENTUTIL if you know exactly what you are
doing.