Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9551 Source: MSExchangeISMailboxStore

An error occurred while upgrading the ACL on folder <folder name> located on database "<name>". The Information Store was unable to convert the security for <distinguished name> into a Windows 2000 Security Identifier. It is possible that this is caused by latency in the Active Directory Service, if so, wait until the userrecord is replicated to the Active Directory and attempt to access the folder (it will be upgraded in place).If the specified object does NOT get replicated to the Active Directory, use the Microsoft Exchange System Manageror the Exchange Client to update the ACL on the folder manually. The access rights in the ACE for this DN were <number>.
In our case it happened on mailboxes where the users defined access rights on the mentioned folder for specific users. The problem was, that the authorized user accounts were deleted in the meantime. Deleting the defined access rights solved the problem.
See ME814075 for a hotfix applicable to Microsoft Exchange 2000.

See ME322258, ME324114 and MSEX2K3DB for information about this event.
This problem may occur if the Exchange Server 5.5 mailboxes (or public folders) were migrated to Exchange 2000 and the DS/IS consistency adjuster was not used on the Exchange Server 5.5 store to remove these entries from the access control list (ACL). See ME318549 for information on solving this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.