If you install Windows 2000 Service Pack 2 (SP2) Security Rollup Package (SRP1) on a computer that is NOT a domain controller, and you promote it to a domain controller, it will NOT start if you remove SRP1?

The only way to recovery after removing SRP1 is to restore from a backup.

The proper way to remove SRP1 in the above situation is to demote the domain controller prior to removing the Security Rollup Package.