Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9562 Source: MSExchangeIS

Source
Level
Description
Failed to read attribute userAccountControl from Active Directory for /o=First Organization/ou=First Administrative Group/cn=Recipients/cn=SystemMailbox{79A2634C-6491-45A0-8C5C-16ACB8C4FEEE}.
Comments
 
I was receiving this error when trying to move a mailbox from a 5.5 to a 2k3 server. I used ADSIedit to verify that the msExchUserAccountControl attribute existed and was set (which it was). It turned out to be a permissions problem. Temporarily adding the "Everyone" group to the mailbox rights (with full rights) allowed me to move the mailbox which in turn added the correct (inherited) permissions.
As per Microsoft: "This event indicates that attribute msExchUserAccountControl is not set or it is set incorrectly on a user object in Active Directory". See MSEX2K3DB for more information.
As per Microsoft: "To resolve this issue, manually rebuild the Recipient Update Service (RUS) so that every user object receives the correct attributes. To rebuild the Recipient Update Services follow these steps:
Open Exchange System Manager.
Click Start, point to Programs, point to Microsoft Exchange, and then click System Manager.
Expand Recipients, and then expand Recipient Update Services.
In the right pane is a list of all Recipient Update Services, in this pane right-click each Recipient Update Service, one at a time, and then click Rebuild."
There are many Microsoft articles that provide information about this event: ME273363, ME273448, ME274119, ME275227, ME277906, ME281607, ME288263, ME289492, and ME301585.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...