Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
An internal MTA error occurred. The logon violated security. Entity name: . Error code: 0. [XAPI MAIN BASE 35 92] (14)
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Exchange MTA Service?
According to Microsoft, this is a permissions issue. See ME154298 and MSEX2K3DB for additional information about this event.
As per Microsoft: "This Event ID is logged in the Windows NT Event Viewer application log if the account listed on the Override tab of the Site Connector in the Microsoft Exchange Administrator program does not have Service Account Admin rights on the Configuration and Site containers". See ME152624 for more details.
As per Microsoft: "To resolve this issue, make sure that the Permissions pages for the organization, site, and configuration objects list the service account with the Service Account Admin role.". See the link below for more details.
|Private comment: Subscribers only. See example of private comment|
|Links: ME152624, ME154298, ME247787, MSEX2K3DB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated