| Event Id | 1004 |
| Source | CDOEXM |
| Description | <service name> failed to start. |
| Event Information | "According to Microsoft : CAUSE: An error occurred in the initialization of Microsoft Exchange System Attendant service (Mad.exe). The Error Code in the event ID will usually reveal the reason why the SA is unable to start. This event might also be accompanied by Events 2064, 2072, and so on. Global catalog server cannot be contacted. (Investigate why this is so.) The name of the Windows 2000 server running Exchange has been changed. Kerberos Key Distribution Center (KDC) service may have been disabled. The Manage Auditing and Security Logs permission for the Exchange Enterprise Servers group may be missing. RESOLUTION: Ensure that the global catalog can be contacted. This is more of a networking issue and could involve enabling/changing firewall ports, and so on. Change the name of the Windows 2000 server to reflect what is in Active Directory. Start the KDC Service and set it to Automatic Startup. Run SETUP/DOMAINPREP to assign the Manage Auditing and Security Logs permission to the Exchange Enterprise Servers Group" |
| Reference Links | More Information |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.