JSI Tip 3617. Error 1352 when you try to start the KDC?

When you try to start the KDC (Kerberos Key Distribution Center) on a Windows 2000 server, you receive Error 1352 - The Security Accounts Manager (SAM) or Local Security Authority (LSA) server was in the wrong state to perform the security operation, and the System event log records:

Event Type: ErrorEvent Source: Service Control ManagerEvent Category: NoneEvent ID: 7023Date: 4/12/2001Time: 1:17:13 PMUser: N/AComputer: Description: The Kerberos Key Distribution Center service terminated with the following error: The Security Accounts Manager (SAM) or Local Security Authority (LSA) server was in the wrong state to perform the security operation.

The KDC can only be started on an Active Directory domain controller.

Make sure that the Startup Type is set to disabled on all member and stand-alone servers.