Forum Discussion

fernandomichels's avatar
fernandomichels
Copper Contributor
Oct 26, 2020

"The security database has not been started" after promote new DC

Hi, I have two DC with W2K12 and W2K16. Recently, I've promoted a new server W2K19 as a domain controller. All the process was successfully executed and after the first reboot, I can't do an intera...
Active Directory
Windows Server
adriansheedy's avatar
adriansheedy
Copper Contributor
Sep 21, 2021

MichaelMcClintock Sorry no I have no useful direction for you. MS Support was similarly unable to fix the issue. Their final recommendation was to rebuild from scratch. Grrrrr...

  • themoblin's avatar
    themoblin
    Copper Contributor
    Dec 05, 2021
    Finally got this sorted. It turns out that during the domain functional level raise operation, the "Password Settings Container" object did not get created.

    I used ADSIEdit to create this manually (object type is msDs-PasswordsettingsContainer and the DN for the object is: CN=Password Settings Container,CN=System,DC=MYDOMAIN,DC=local

    Hope this helps someone in the future.
    • EnricoGiacomin's avatar
      EnricoGiacomin
      Copper Contributor
      May 14, 2024
      Thanks a lot.
      I got the same issue and I contacted yesterday the Microsoft Support. Luckily, try different diagnostic approach I got an error than lead me to this thread.
      After creating the msDs-PasswordsettingsContainer object, everything turned on.

      Enrico Giacomin.
    • Dave13_'s avatar
      Dave13_
      Copper Contributor
      Mar 25, 2024
      THANK YOU!!! New DC wouldn't accept any kind of login, including domain administrator. Tried changing dom admin password and got the error 'security database has not been started' (it was running of course). The search for that message lead me here. Again, thank you!!!
    • PhilJMason's avatar
      PhilJMason
      Copper Contributor
      Oct 01, 2023

      themoblin 

       

      I legit just made an account to thank you. This has been the bane of my existence all weekend. I raised the functional level of our domain/forest from 2003 to 2012 and the "Password Settings Container" object did not get created - which was preventing me from logging into a new DC I am deploying. All other computers/servers would accept login requests except for this new DC. Adding this object solved my problem.

  • themoblin's avatar
    themoblin
    Copper Contributor
    Nov 29, 2021

    adriansheedy Thats a shame, I've got a server with the same issues and I've been banging my head against a wall for 4 days now trying to sort it.

Resources