Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1153 Source: NTDSGeneral

Class identifier <identifier> (class name msExchRoutingGroupConnector) has an invalid superclass <identifier>. Inheritance ignored.
Microsoft reports the event as benign if it appears when the Windows Server schema changes are added to a Windows 2000 forest by using Adprep.exe from a server edition of Windows Server. See ME307323 and ME240147 for more details.

ME325379 gives detailed information on how to upgrade Windows 2000 Domain Controllers to Windows Server 2003. This article also contains a sample of this error, which in the context presented in the article can be ignored.

See the link to "EventID 1153 from source Active Directory" for additional information on this event.
You see these errors in a situation where you have a root domain, and a child domain that both have Global Catalog Servers. When you run the setup /forestprep command from the Exchange media in the root domain, during the replication process between the root, and child domain, you see these errors logged in the application event log on the server in the child domain.

This behavior occurs because the schema is imported in an order other than superclass inheritance. When a class is imported, superclass attributes point to other classes. Because  these may not have been imported yet, you see these errors in the application event log. You can safely ignore these errors. See ME268329.
As per ME268995, Microsoft says to "obtain the latest service pack for Windows 2000" and as a workaround "demote the domain controller and then promote the domain controller".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.