| Event Id | 2076 |
| Source | MSExchangeDSAccess |
| Description | Process <process name> (PID=<process id>). The PreloadBaseDNs and PreloadFilters registry keys donot contain the same number of entries. PreloadBaseDNs contains <number> strings andPreloadFilters contains <number> strings. Only the first <number> preload filters will be utilized. |
| Event Information | Explanation : This is a rare event that occurs if the following registry subkey has not been populated correctly (or has been modified incorrectly): HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeDSAccess\PreloadFilters User Action : Check the data of the PreloadFilters subkey. It should contain the following default value: (&(|(msExchMasterAccountSID=%)(objectSid=%))(!(objectClass=foreignSecurityPrincipal)))(|(msExchMailboxGUID=%)(objectGUID=%))(legacyExchangeDN=%)(msExchMailboxGUID=%)(&(proxyAddresses=%)(|(objectClass=user)(objectClass=contact))) |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.