尝试用正常系统的注册表项添加到非正常系统中去。（因为对比的两个系统版本、结构相同，所此次就直接通过导入导出注册表项进行批量修改）。
1．故障现象
通过 sql server 服务管理器 启动出错提示如下:
通过服务管理器启动出错提示如下:
2．原因分析
安照《》这篇文章的方案思路进行排除解决。
3．解决办法
对于本次出现的错误，在查看正常系统服务文件时发现少几个项值。并检查一些数值数据是否被篡改如下：
begin 下为非正常系统的项
[hkey_local_machine\system\currentcontrolset\services\mssearch]
type=dword:00000020
start=dword:00000002
errorcontrol=dword:00000001
displayname=microsoft search
imagepath=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,\
6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,43,00,6f,00,6d,00,6d,00,6f,\
00,6e,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,79,00,73,00,74,00,\
65,00,6d,00,5c,00,4d,00,53,00,53,00,65,00,61,00,72,00,63,00,68,00,5c,00,42,\
00,69,00,6e,00,5c,00,6d,00,73,00,73,00,65,00,61,00,72,00,63,00,68,00,2e,00,\
65,00,78,00,65,00,22,00,00,00
description=基于结构化和半结构化数据的内容以及属性生成全文索引，以便可以对数据进行快速的单词搜索
[hkey_local_machine\system\currentcontrolset\services\mssearch\performance]
perfinifile=dsscntrs.ini
last counter=dword:00001290
last help=dword:00001291
first counter=dword:00001260
first help=dword:00001261
[hkey_local_machine\system\currentcontrolset\services\mssearch\enum]
0=root\\legacy_mssearch\\0000
count=dword:00000001
nextinstance=dword:00000001
下为正常系统的项
windows registry editor version 5.00
[hkey_local_machine\system\currentcontrolset\services\mssearch]
type=dword:00000020
start=dword:00000002
errorcontrol=dword:00000001
imagepath=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,\
6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,43,00,6f,00,6d,00,6d,00,6f,\
00,6e,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,79,00,73,00,74,00,\
65,00,6d,00,5c,00,4d,00,53,00,53,00,65,00,61,00,72,00,63,00,68,00,5c,00,42,\
00,69,00,6e,00,5c,00,6d,00,73,00,73,00,65,00,61,00,72,00,63,00,68,00,2e,00,\
65,00,78,00,65,00,22,00,00,00
displayname=microsoft search
dependonservice=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,4e,00,54,00,4c,00,\
4d,00,53,00,53,00,50,00,00,00,00,00
dependongroup=hex(7):00,00
objectname=localsystem
description=基于结构化和半结构化数据的内容以及属性生成全文索引，以便可以对数据进行快速的单词搜索
[hkey_local_machine\system\currentcontrolset\services\mssearch\performance]
perfinifile=dsscntrs.ini
last counter=dword:00000ffe
last help=dword:00000fff
first counter=dword:00000fce
first help=dword:00000fcf
[hkey_local_machine\system\currentcontrolset\services\mssearch\security]
security=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,fd,01,02,00,01,02,00,\
00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00
[hkey_local_machine\system\currentcontrolset\services\mssearch\enum]
0=root\\legacy_mssearch\\0000
count=dword:00000001
nextinstance=dword:00000001
end
尝试用正常系统的项添加到非正常系统中去。（因为对比的两个系统版本、结构相同，所此次就直接通过导入导出项进行批量修改）。