Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4072 Source: MSExchangeIMC

Source
Level
Description
The Internet Mail Service administrator account is no longer valid. The Internet Mail Service will not start until you recreate the administrator account or configure the Internet Mail Service to use another administrator account.
Comments
 
One of our Administrators decided to delete the Administrator's account that was being used by Exchange's IMC (to report any administrative problems, etc.) When the IMC starts, it tries to get a pointer to the administrator's account. When it cannot find that account, the IMC fails. As this administrator didn't connect his actions, he wasn't able to 'fess up to any changes that he'd made. I found the fix at the MS KBase. Here's the summary. Open Exchange Administrator, go to site -> Connections -> Internet Mail Service -> Properties. Verify that the Administrator's mailbox is set to a valid account.". See ME183178

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...