Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9556 Source: MSExchangeIS

Unable to set permission for DL <distribution list path> because it could not be converted to a security group. This most likely is because your system is in a mixed domain.
The most likely cause for this error is that the Exchange Server 5.5 distribution list to which the users belong was replicated into an Active Directory mixed-mode domain rather than into an Active Directory native-mode domain. See the link to "Troubleshooting and Repairing Exchange Server 2003 Store Problems" for details.

As per Microsoft: "This event is typically seen in Mixed Environments (that is, environments that still contain Exchange 5.5 servers). This event indicates that Exchange attempted to set permissions on a Distribution List and, in doing so, attempted to convert it to a Universal Security Group (USG), which failed". See MSEX2K3DB for additional information about this event.
This event occurs when there is an attept to use a distribution group (new to Active Directory) for client permissions and your AD runs in mixed mode. Such groups can be used only when AD runs in native mode. Use the Security groups that are compatible with NT domains (required for mixed mode).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.