Event ID 9074 Source MSExchangeSA
| Event ID | 9074 |
| Source | MSExchangeSA |
| Type | Error |
| Description | The Directory Service Referral interface failed to service a client request. RFRI is returning the error code:[0x3f0]. |
| English, please! | Request a translation of the event description in plain English. |
| Concepts to understand |
What is the role of the Microsoft Exchange System Attendant (MSExchangeSA) service? What is a directory service? |
| Comments |
Anonymous
(Last update 1/28/2006): In my case, I found that this error was caused by a failed Exchange Server that used to be our DC and still had authority as a Global Catalog publisher. We got a new Exchange Server but forgot to take off the check mark under the old server to remove that function. Once we set that function on the new server and took it off the old one, the errors went away. You can find that setting in Active Directory Sites and services, then drill down to your server, right click on NTDS settings and select properties. Hadley Robinson (Last update 10/3/2005): This event can occur if File and Printer Sharing for Microsoft Networks is not enabled on the domain controller or the TCP/IP NetBIOS Helper service is disabled. See M257435 for information on how to solve this problem. Ionut Marin (Last update 7/10/2005): As per Microsoft: "This issue may occur if the Exchange Enterprise Servers security group does not have Manage auditing and security logs permissions on the domain controller. The Exchange Enterprise Servers group must have Manage auditing and security logs permissions on all the domain controllers in the domain". See M328662 for details on this problem. As per Microsoft: "This event basically states that the DSPROXY component of the System Attendant Service on the Exchange server failed to service a client request. This failure could be because of issues ranging from failed network connectivity to permissions problems". See MSEX2K3DB for more information. See M895858 and M896703 for additional information on this event. Anne Jan Elsinga (Last update 6/15/2004): We have had the same event when the Global Catalogs were not available. Eddie Bryce (Last update 6/15/2004): If your Exchange servers are showing DSAccess errors and you see EventID 9074 errors, this refers to a stale GC referral entry in the DNS. E.g., a GC once existed in the DNS but when it was removed from the environment, the DNS never flushed it out completely. Therefore, Exchange servers still get a referral back to this GC. Though this has been fixed in the DNS if you see any servers depicting this behavior do a “ipconfig /flushdns” on the Exchange box to force it to reload the DNS cache. You might also want to do a “nbtstat –R” to purge and reload the remote cache name table. For information in this issue, refer to M300114. Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here! Anonymous (Last update 6/15/2004): In a fit of service disabling in the name of server hardening, I discovered that this event (along with the related 9057, 9143 & 9176 events) can be generated by disabling the TCP/IP NetBIOS Helper Service. Adrian Grigorof As per M279742, this problem is caused by the File and Printer Sharing services not being bound to all the network cards in a multihomed machine. Apparently, Windows 2000 is attempting to access its Sysvol share through the primary network adapter to read the group policies. Because the share is unavailable through that adapter, the operation does not work. The M314294 suggests that this error may occur if the "Manage Auditing and Security Log" right (SeSecurityPrivilege) was removed for the Exchange Enterprise Servers domain local group on some or all of the domain controllers. |
| Links | M257435, M279742, M300114, M314294, M328662, M895858, M896703, MSEX2K3DB |
| Search | Google Web - Microsoft Support - Bing - EventID.Net Queue - More links... |
| Feedback | Send comments - Notify me when updated |
| Print version |