| Event Id | 11009 |
| Source | Microsoft ISA Server Control |
| Description | Microsoft ISA Server Control failed to start...... |
| Event Information | According to Microsoft : Resolution: To resolve this issue, use either of the following methods: Change the relevant attribute in Active Directory by using the ADSI Edit tool. Warning: If you use the ADSI Edit snap-in and incorrectly modify the attributes of Active Directory objects, you can cause serious problems that may require you to reinstall Microsoft Windows 2000 Server or ISA Server 2000. Microsoft cannot guarantee that problems that result from the incorrect modification of Active Directory object attributes can be solved. Modify these attributes at your own risk. If you are running Microsoft Windows NT or Windows 2000, you should also update your Emergency Repair Disk (ERD). 1.Expand theDomain NCcontainer. 2. Right-click DC=[your domain], DC=[root domain], and then selectProperties. 3. Click the Security tab .4. ClickAdvanced. 5. On the Permissionstab, clickAuthenticated Usersand then clickView/Edit. 6. Make sure theApply onto drop-down box is set toThis object only.7. In thePermissionslist, make sure the following items are set to Allow: List Contents Read All Properties Read Permissions 8. Wait until replication is performed for all domain controllers in the domain. Determine whether the relevant permission is enabled on array itself. To do this, open the array node properties in the ISA Management console, and then check the security tab. Note that the Authenticated Users group is a built-in group (the SID is S-1-5-11). Any account in the server's domain (or in any domain that is trusted by the server's domain) that opens an authenticated network connection is identified as an authenticated user. Because the ISA Server services run under the local system account, a service's connection to a domain controller is also identified as member of the Authenticated Users group. Therefore, it is important to give Read permission to this group on the system node (which is the parent node of the ISA Server configuration) and on all of the ISA Server nodes. |
| Reference Links | Event ID 11009 from Source Microsoft ISA Server Control |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.