We were receiving this error message for a few weeks along with errors 1019 and 1023 from the same source. Our SBS 2003 server has a second NIC that is currently unused but was still enabled during the time we were receiving these errors. After disabling (not physically removing) the second NIC we are no longer seeing these event errors.
- Error code: 80040a01 - The Microsoft Exchange System Attendant service may not come online on a server that is running Microsoft Exchange Server 2003 in a Microsoft Windows 2000 active/passive cluster. This problem occurs if the RootVer registry value is invalid. See M906154 to correct this problem.
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.