Here is a best solution for following very common problem in Win2k8 servers;
(RESOLVED)Win2k8 RTM (Non SP1)//Win2k8 R2 RTM / Win2k8 R2 SP1 server gets BSOD with 0x6b code.
- Copy "Bootcat.cache" file from "C:\Windows\system32\CodeIntegrity" and "NTDLL.DLL" file from "System32" folder from a SIMILAR ( Win2k8 RTM (Non SP1) / Win2k8 R2 RTM / Win2k8 R2 SP1) working server and make a ISO or FLP image using any ISO / flp image creator software (like Magic ISO WWW.magiciso.com ).
- Mount the ISO/FLP image to the BSOD server.
- Reboot the server with Startup repair boot menu by pressing F8 at the startup.
- Go to CMD and restore the Bootcat.cache file from the CD/Floppy mounted to "%systemroot%\system32\CodeIntegrity" folder and NTDLL.DLL to "%systemroot%\system32\" folder. (Also, do not forget to keep a copy of the file some ware on the server, so that, it can be used next time the BSOD occurs if the server rebooted by any means).
- Reboot the server, press F8, and then select "Disable Driver Signature Enforcement" menu.
- Server will be up now.
- Upgrade the server to SP1 (if applicable). (After upgrading, once you reboot the server, you may get the BSOD again. Follow the same steps to bring back to normal. Once the SP1 upgrade process is over, issue will fix!.)
- Verify by rebooting the server.
Reason for this issue:
Ntdll.dll file under System32 folder is corrupt.
This file is used to create bootcat.cache file.
Bootcat.cache file creation mechanism failed. Once you delete the file and reboot, it should create it again automatically. But, in this case, it never creates the file. So, this concludes, some kernal files related to bootcat.cache file creation is damaged.
Edited by hamluis, 27 November 2013 - 08:17 AM.
Moved from Introductions to Win NT - Hamluis.