Skip to content

Commit 5506a07

Browse files
author
Simonx Xu
authored
Merge pull request #8277 from sagivahabi/docs-editor/lds-service-startup-fails-1740326315
AB#4074: Update lds-service-startup-fails.md
2 parents 2c6d65f + 55a55e7 commit 5506a07

File tree

1 file changed

+6
-85
lines changed

1 file changed

+6
-85
lines changed
Lines changed: 6 additions & 85 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: LDS service startup fails
33
description: Introduce the solution for LDS Service startup failure after you manually change msDS-Behavior-Version attribute.
4-
ms.date: 01/15/2025
4+
ms.date: 02/26/2025
55
manager: dcscontentpm
66
audience: itpro
77
ms.topic: troubleshooting
@@ -10,16 +10,14 @@ ms.custom:
1010
- sap:active directory\ldap configuration and interoperability
1111
- pcy:WinComm Directory Services
1212
---
13-
# LDS service startup fails after you manually change msDS-Behavior-Version in Windows Server 2019 and 2016
13+
# LDS service startup fails after you manually change msDS-Behavior-Version in Windows Server
1414

15-
This article provides a solution to an error that LDS service startup fails after you manually change msDS-Behavior-Version.
15+
This article provides a solution to an error that the LDS service startup fails after you manually change the **msDS-Behavior-Version** attribute.
1616

17-
_Applies to:_   Windows Server 2019, Windows Server 2016
17+
_Applies to:_   All supported versions of Windows Server and Windows Client
1818
_Original KB number:_   4550446
1919

20-
## Symptom
21-
22-
In ADSI Edit, you change the **msDS-Behavior-Version** attribute of the Partitions container to **7** in order to raise the Active Directory (AD) Lightweight Directory Services (LDS) instance functional level to WIN2016.
20+
In ADSI Edit, you change the **msDS-Behavior-Version** attribute of the **Partitions** container to **7** in order to raise the Active Directory (AD) Lightweight Directory Services (LDS) instance functional level to **WIN2016**.
2321

2422
:::image type="content" source="media/lds-service-startup-fails/attribute-editor.png" alt-text="Change the msDS-Behavior-Version attribute to 7.":::
2523

@@ -51,81 +49,4 @@ Additionally, you receive the following error message:
5149
5250
:::image type="content" source="media/lds-service-startup-fails/error-message.png" alt-text="Error 0xc0000025 Windows could not start the L D S service on Local Computer.":::
5351

54-
## Cause
55-
56-
Manually setting the **msDS-Behavior-Version** attribute value to **7** on LDS instances is not supported.
57-
58-
## Resolution
59-
60-
If the LDS instance contains only one server, you must restore the server from a backup to resolve the issue.
61-
62-
If there are multiple replica servers in that instance (for example, LDSServer1 and LDSServer2), and if one server has not yet been restarted, follow these steps:
63-
64-
1. If the LDS server on which the service that does not start (for example, LDSServer1) holds the LDS Roles (for example, Schema and Domain Naming FSMO), seize the roles by running ntdsutil:
65-
66-
> C:\Windows\system32> **ntdsutil**
67-
ntdsutil: **roles**
68-
fsmo maintenance: **connections**
69-
server connections: **connect to server LDSServer2:50000( 50000 is the port number in that example)**
70-
Binding to LDSServer2:50000 ...
71-
Connected to LDSServer2:50000 using credentials of locally logged on user.
72-
server connections: **q**
73-
fsmo maintenance: **seize schema master**
74-
75-
:::image type="content" source="media/lds-service-startup-fails/role-seizure-confirmation-dialog.png" alt-text="A role seizure confirmation dialog displays.":::
76-
77-
2. Connect to the configuration partition of the server that still runs the LDS instance (for example, LDSServer2), and then roll back the functionality level version by reverting the **msDS-Behavior-Version** attribute value.
78-
79-
3. Run a metadata cleanup of the LDS server (LDSServer1) by using **dsmgmt**:
80-
81-
> C:\Windows\system32> **dsmgmt**
82-
dsmgmt: **metadata cleanup**
83-
metadata cleanup: **connections**
84-
server connections: **connect to server LDSServer2:50000 ( 50000 is the port number in that example)**
85-
Binding to LDSServer2:50000 ...
86-
Connected to LDSServer2:50000 using credentials of locally logged on user.
87-
server connections: **q**
88-
metadata cleanup: **select operation target**
89-
select operation target: **list naming contexts**
90-
Found 3 Naming Context(s)
91-
0 - CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
92-
1 - CN=Schema,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
93-
2 - DC=LDS,DC=COM
94-
select operation target: **select naming context2 ( 2 stands for the domain naming context )**
95-
No current site
96-
No current domain
97-
No current server
98-
Naming Context - DC=LDS,DC=COM
99-
select operation target: **list sites**
100-
Found 4 site(s)
101-
0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
102-
1 - CN=Site1,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
103-
2 - CN=Site2,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
104-
3 - CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
105-
select operation target: **select site3 (where 3 is the number of the site in which the server is located,** **matching output from previous step)**
106-
Site - CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
107-
No current domain
108-
No current server
109-
Naming Context - DC=LDS,DC=COM
110-
select operation target: **list servers in Site**
111-
Found 1 server(s)
112-
0 - CN=LDSServer1,CN=Servers,CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
113-
select operation target: **select Server0 (where 0 is the number of the server you wish to remove, matching output from previous step)**
114-
Site - CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
115-
No current domain
116-
Server - CN=LDSServer1,CN=Servers,CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
117-
DSA object - CN=NTDS Settings,CN=LDSServer1,CN=Servers,CN=Site3,CN=Sites,CN=Configuration,CN={6B7FEBF4-017B-4366-A8B8-3E5467888DEF}
118-
DNS host name - LDSServer1.CONTOSO.COM
119-
Naming Context - DC=LDS,DC=COM
120-
select operation target: **q**
121-
metadata cleanup: **remove selected server**
122-
123-
:::image type="content" source="media/lds-service-startup-fails/server-remove-confirmation-dialog.png" alt-text="Select Yes to remove the server object in the Server Remove Confirmation Dialog box.":::
124-
125-
4. Log on to LDSServer1, and uninstall the instance:
126-
127-
:::image type="content" source="media/lds-service-startup-fails/uninstall-program.png" alt-text="Select the instance that you want to uninstall in Programs and features window.":::
128-
129-
:::image type="content" source="media/lds-service-startup-fails/select-skip-all.png" alt-text="Select Skip All in the Active Directory Lightweight Directory Services Removal Wizard.":::
130-
131-
5. Run the Active Directory Lightweight Directory Services Setup (C:\Windows\ADAM\adaminstall.exe) on LDSServer1 to install a replica of the existing instance from LDSServer2.
52+
For Windows servers with monthly updates before the February 2025 update rollup installed, manually setting the **msDS-Behavior-Version** attribute value of LDS instances to **7** isn't supported. To resolve the issue, install the February 2025 update rollup or a later version.

0 commit comments

Comments
 (0)