Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
Microsoft Exchange System Attendant has detected that the local computer is not a member of group "<name>". System Attendant is going to add the local computer into the group.
The current members of the group are "<text>".
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange System Attendant (MSExchangeSA) service?
What is the role on System Attendant service?
As per Microsoft: "While this is rare, this can happen in an instance where the Exchange server has been moved from one organizational unit (OU) in a Domain to another OU. This move causes the Distinguished Name of the server to change. However, because the System Attendant caches this value, this warning is logged". See ME931745 and MSEX2K3DB for additional information about this event.
See ME271335 to find out why this event occurs.
As per Microsoft, the Exchange Domain Servers group is granted special rights throughout Active Directory. For any Exchange 2000 Server computer to work properly, the computer must be a member of the Exchange Domain Servers group. To prevent potential problems, if the system attendant detects that the computer name is not a member of this group, the system attendant adds the computer automatically." See the link below.
|Private comment: Subscribers only. See example of private comment|
|Links: ME263087, ME271335, ME931745, MSEX2K3DB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated