| Event Id | 9152 |
| Source | MSExchangeSA |
| Description | Microsoft Exchange System Attendant reported an error error code in its DS Monitoring thread. |
| Event Information | According to Microsoft: CAUSE : This behavior may occur if the msExchEncryptedPassword attribute on the Administrative Group (AG) object of the Exchange server is corrupted. Additionally, this problem occurs in an environment that uses an Exchange server that uses the Active Directory Connecter (ADC). RESOLUTION : To resolve this behavior, verify the Exchange service account and the password. To do this, follow these steps: 1. Click Start, point to Programs, point to Microsoft Exchange, and then click System Manager. 2. Expand Administrative Groups. 3. Right-click the administrative group that contains your Exchange Server 2000 computers, and then click Properties. 4. Click the General tab, click Modify, and then make sure that you type the correct password for the AG in the Password box. 5. Click OK. This information from newsgroup may help: ------------------------------------------------------------------------------ Explanation : This event can occur when Exchange 2000 is installed into an Exchange 5.5 environment with multiple Active Directory Domains and Active Directory Sites. When this event occurs, you may find that the Site Replication Service also does not start. If this is a Clustered Exchange 2000 Server, then the events may be seen on one of the nodes if the resources from that node are moved to the other node. This behavior can occur if you install another Exchange 2000 server in a different Active Directory Site before replication occurs. After the installation of the second Exchange 2000 server, the directory replication cycle overwrites the msExchEncryptedPassword attribute. When the SRS (Site Replication Service) runs again, it attempts to read this attribute, but is unable to locate it. User Action : Start Exchange System Manager. Right-click the Administrative Group and click Properties. In the General tab, click M |
| Reference Links | Event ID 8213 and Event ID 9152 are logged by Exchange 2000 Server
Event ID 9152 MSExchangeSA Logged on One Node of Exchange 2000 Cluster Event ID 9152 (Error 80044501) When You Install Exchange 2000 into an Exchange Server 5.5 Site |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.