Microsoft KB Archive/325674

= System Attendant does not start after disaster recovery installation, and event ID 9022, 9149, 1005 messages occur =

Article ID: 325674

Article Last Modified on 10/25/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition
 * Microsoft Exchange Server 2003 Enterprise Edition
 * Microsoft Exchange Server 2003 Standard Edition

-



This article was previously published under Q325674



SYMPTOMS
After you run an Exchange disaster recovery installation, System Attendant may not start, and you may receive the following event ID messages:

Event Type: Error

Event Source: MSExchangeSA

Event Category: General

Event ID: 9022

Description:

Microsoft Exchange System Attendant encountered an error while processing the security data for Exchange server ''.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Event Type: Error

Event Source: MSExchangeSA

Event Category: General

Event ID: 9149

Description:

Microsoft Exchange System Attendant failed to start Exchange server ''. Error code '0x80070005'.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Event Type: Error

Event Source: MSExchangeSA

Event Category: General

Event ID: 1005

Description:

Unexpected error Access denied. Facility: LDAP Provider ID no: 80070005 Microsoft Exchange System Attendant occurred.



CAUSE
This issue may occur if the server account does not have the correct permissions on the Exchange server container in Active Directory.



RESOLUTION
To resolve this issue, use ADSI Edit to grant the correct permissions for the server account on the Exchange server container in Active Directory.

ADSI Edit is located in the Support\Tools folder of the Windows 2000 or Windows Server 2003 CD. To install Windows 2000 or Windows Server 2003 Support Tools, follow these steps:
 * 1) Insert the Windows 2000 Server or Windows Server 2003 CD in your CD-ROM drive.
 * 2) Click No if you are prompted to reinstall Windows 2000 Server or Windows Server 2003.
 * 3) Open the Support/Tools folder. For complete setup information, see the Sreadme.doc file that is available in this folder.


 * 1) Double-click Setup.exe or suptools.msi.
 * 2) Follow the instructions that appear on your screen.

How to Use ADSI Edit to Grant the Correct Permissions
Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.  Start ADSI Edit.  Click Start, click Run, type adsiedit.msc, and then click OK. Click Tools, and then click ADSI Edit.  Expand Configuration, expand Configuration (CN=Configuration,DC= ,DC=com), expand Services, and then expand Microsoft Exchange.</li> Expand  , expand Administrative Groups, expand  , and then expand Servers.</li> Right-click Server Name, and then click Properties.</li> Click the Security tab, verify that the server object is in the list of accounts with rights, and then verify that the Allow check box for Full Control is selected. If this permission is not selected, click to select the Allow check box for Full Control, and then click OK.</li> Quit ADSI Edit.</li> Wait for the change to replicate among the domain controllers.</li> Start System Attendant.</li></ol>

<div class="references_section">