Why can't I access the Microsoft Management Console (MMC) Active Directory (AD) snap-ins in Windows 2000 and later?

John Savill

April 20, 2003

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. When you attempt to use the Active Directory Users and Computers snap-in, Active Directory Sites and Services snap-in, or Active Directory Domains and Trusts snap-in, you might receive one of the following errors:

  • "Naming information cannot be located because: Logon attempt failed. Contact your system administrator to verify that your domain is properly configured and is currently online."

  • "The configuration information describing this enterprise is not available. The logon attempt failed."

These errors can occur if your security settings have been corrupted. To repair these settings, perform the following steps:

  1. Start a command session--go to Start, Run and type

    cmd
  2. Enter the commands

    secedit /configure /cfg %systemroot%repairsecsetup.inf /db secsetup.sdb

    and

    secedit /configure /cfg %systemroot%repairsecdc.inf /db secdc.sdb
  3. Close the command session.

The commands can take in excess of 10 minutes to process, so be patient. If you receive the following warning about a task that the system couldn't complete, you can safely ignore the warning:

"Task is completed. Some files in the configuration are not found on this system so security cannot be set/queried. It's ok to ignore.See log %windir%securitylogsscesrv.log for detail info."

Read more about:

Microsoft

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like