Event ID - 9157

Event Id	9157
Source	MSExchangeAdmin
Description	Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objectsin Active Directory. Wait for replication to complete and then check to make sure the computer account is a memberof the "Exchange Domain Servers" security group.
Event Information	According to Microsoft : Explanation : This error can be triggered under several conditions as follows: When mounting a mailbox store or public folder store. When the System Attendant is trying to generate an Offline Address Book. When the stores are down and the System Attendant is trying to do its routine management tasks. When attempting to perform a Move Mailbox operation. At the rate of 1 every minute on a clustered Exchange Server. In essence, this message indicates that the System Attendant process has been unable to log on to the Mailbox Store or Public Store. This event can have several causes and the ID number in the Description section of the event will be the only difference between the events. Depending on what the underlying cause of the problem is, the ID number will vary. The other ID numbers that could be seen are: 8004011d-0519-0000000, 80040111-0286-00000000, 8004011d-0289-00000000 The Microsoft Exchange Information Store service is not running. The Microsoft Exchange Information Store service is running, but one or more databases are not mounted. The Read System Access Control List (SACL) of the Exchange Enterprise Group is lost. The MDBDATA folder has inappropriate permissions. The System Attendant service is running with a different user account than "Local System". The Default Public Store attribute on an Exchange 2000 server points to an Exchange 5.5 server public store in another domain. The System Mailbox object that is created for this mailbox store exists in the Microsoft Exchange System Objects container . Resolution : Although the proper resolution will be determined by the ID number that is indicated in the event, you can try the following actions: Verify that the Microsoft Exchange Information Store service is running. Make sure that the default mailbox store is mounted. Run setup /domainprep. Verify the permissions on the MDBDATA folder. Change the properties of the System Attendant service so that it runs in the context of the Local System Account. ------------------------------------------------------------------------------------------------------------------ According to Microsoft: See the message text for the event. User Action : No user action may be required because Exchange will make additional attempts to read Exchange configuration objects during the replication process. If this event occurs after all domain controller replication has occurred, ensure that the required permissions have been assigned to the Exchange Domain Servers group for this domain. To ensure that the required permissions are configured, run Exchange setup again and select Reinstall. Running setup again will set permissions on the necessary Active Directory objects on a nearby domain controller, and those permissions will then be replicated to other domain controllers. You can also manually ensure that the required permissions have been configured. To do this, ensure that the Exchange server is a member of the Exchange Domain Servers group of its domain using the Active Directory Users and Computers snap-in. You must also use the Active Directory Service Interfaces (ADSI) Edit snap-in to ensure that the Exchange Domain Servers group of this domain is assigned Full Control permissions on the Configuration/Services/Microsoft Exchange object.
Reference Links	Event ID 9175 from Source MSExchangeAdmin Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objectsin Active Directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught