Recover the system hive of a Windows server

Restoring the system hive
If a server fails on boot because of system hive problems, you can take various approaches to remedy the situation and get your server running again. These involve the Emergency Repair Disk, the Windows 2000 Recovery Console, and the Emergency Repair Process. The Emergency Repair Disk
Repairing the system hive so that the computer will boot to a usable state is a relatively simple matter, but how much work you'll have to do once you're up and running depends on having a recent copy of the registry. That's why the ERD process is so important. If you have an ERD, you have a recent copy of the system hive, and you need to do just a few things to restore the hive. If you don't have an ERD, you'll have some more work to do to get your server back in shape. Of course, to use an ERD, you need to have made one in the first place. Many administrators put off this task because server configurations can and do change. However, if you haven't made an ERD yet, you should make one at the earliest possible opportunity-such as right after you finish reading this article. The ERD is not a boot diskette, but is used in conjunction with the Windows 2000 Recovery Console. You can make an ERD with the Windows 2000 Backup program. To start the process, click Start | Run. When the Run dialog box opens, type ntbackup and click OK. After the Backup program starts, click the Emergency Repair Disk button and follow the prompts. When you see the Emergency Repair Diskette screen, select the Also Backup The Registry check box. The ERD writes files to a floppy, and creates a folder called Regback on your server's hard drive in the %systemroot%\repair\regback folder. This folder contains the most recent version of files copied to the ERD, including the latest version of the system hive file. You should create a new ERD every time you apply a service pack update to the system or a driver. This ensures that the ERD has a fresh copy of the system hive. The Windows 2000 Recovery Console
The Recovery Console is a tool for advanced administrative tasks. You can run it from the Windows 2000 CD at boot or install it onto a server. If you haven't previously installed the Recovery Console on your server, I highly recommend that you do so. To install the Recovery Console, insert the Windows 2000 CD into the CD-ROM drive. Open a command prompt and type drive:\i386\winnt32.exe /cmdcons, where drive is the drive letter for the CD-ROM drive. Click Yes to start the installation procedure. Then, restart the server. The next time you boot the server, the Microsoft Windows Recovery Console will appear as a choice on the server's boot menu. If you want to start the repair process, select this choice; otherwise, let the server boot as normal. To run the Recovery Console from the Windows 2000 CD at boot time, first make sure that your server's BIOS is set to boot from the CD-ROM drive. Once you get to the text-mode portion of Setup, you're prompted to install Windows 2000 or press R to repair an existing installation. Naturally, you'll press R, because you don't want to completely reinstall Windows 2000. The next screen asks you to choose between using the Recovery Console and the Emergency Repair Process. The Recovery Console presents you with a command line starting in the %systemroot% directory. As we'll see, you can repair your server this way by renaming files. The Emergency Repair Process
By contrast, the Emergency Repair Process presents two options to fix your system: Manual Repair and Fast Repair. Manual Repair inspects the Windows 2000 startup environment, verifies Windows 2000 system files, and inspects the boot sector. It doesn't check the registry files. Choose the Fast Repair option and, assuming that %systemroot%\repair is accessible, the registry files will be checked. If you can't start your server because of a problem with the system hive, you'll likely see a message such as Error Message: Windows Could Not Start Because The Following File Is Missing Or Corrupt: \Winnt\System32\Config\System.ced. You'll also see this error message if you've installed a Promise ATA66 IDE PCI controller card. If you have, remove it and try again.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

BrownieBoy

> I'm told it's somewhat annoying when people have their Macs stolen > and Apple stores treat the thief as the owner, but there you go. Ouch,...

9 minutes ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks
Moley

@kevinmchapman. OK, I acknowledge that 'most' was a gratuitous throwaway comment as an afterthought and too presumptuous. As to proof, as you...

5 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint
Jack Schofield

@BrownieBoy > Works really well for thieves.... >> Nice attempt to deflect the argument by tossing in a point that's totally >> irrelevant, even...

6 hours ago by Jack Schofield on AMD Ultrathins to challenge Intel Ultrabooks
raskolnikof

fantastic that the so called piracy bills have been withdrawn. however, these anti-democracy supporters are still in the shadows so lets be alert...

6 hours ago by raskolnikof on SOPA, Protect IP support wavers in face of online protest
Tony Douglas

Please God no; teach them anything you like - thinking rationally, the uses and misuses of data, what data is and what it's not - but leave the...

9 hours ago by Tony Douglas via Facebook on Kids are the future. Teach ’em to code.
BrownieBoy

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

23 hours ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks
bootlegger

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

1 day ago by bootlegger on UK airport body scans will not be opt out
tinycg

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

1 day ago by tinycg on Four top iPad apps for people on the move
TerryRK

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Freebies202

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

2 days ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source
kevinmchapman

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
Marg Menzies Harrison

Another grammar faux pas is the improper use of "you". When sitting down down in a restaurant, for example, I get cringe when the waitress...

2 days ago by Marg Menzies Harrison via Facebook on 10 flagrant grammar mistakes that make you look stupid
zdnetukuser

And NOW, folks, for Canonical's next trick... Kubuntu is late. Here's a pencil. Draw your own conclusions. cf.:...

2 days ago by zdnetukuser on Linux Minterface
Moley

@kevinmchapman. The discussion here reflects the very significant number of users who really do like the traditional menu system and who wish to...

2 days ago by Moley on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

Er, no... It is an efficient means of finding the application/file/setting you need in one place. The icons are a simply a fallback for when you...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

Isn't the provision of a text based search an admission by the developers that the mass of icons approach does not work? I don't need to use a...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

"Unity and GNOME 3 both abandon the old text-based cascading menus in favour of a graphical icon-driven system." Point truly missed. Both use a...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

whs001 - Thank you, I'm glad you liked the article. I absolutely agree with you on your first point. I should perhaps have made it clearer that...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Dennis Nilsson

If we allow corporate interest to dictate the way our government circumvents due process against foreign entities then we should accept the same...

2 days ago by Dennis Nilsson via Facebook on ACTA stumbles in Germany
GHar123

I totally dislike pirating of works, I fear that artists will be deterred from creating works if they think that they are going to get ripped off....

3 days ago by GHar123 on ACTA stumbles in Germany