Article ID: 280432
Article Last Modified on 12/3/2007
APPLIES TO
- Microsoft Exchange Server 2003 Enterprise Edition
- Microsoft Exchange Server 2003 Standard Edition
- Microsoft Exchange 2000 Server Standard Edition
- Microsoft Windows Small Business Server 2003 Premium Edition
- Microsoft Windows Small Business Server 2003 Standard Edition
This article was previously published under Q280432
SYMPTOMS
When you attempt to start the Exchange Server System Attendant service, the service may not start and the following events are logged in the Application event log:
Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9022
Date: 11/14/2000
Time: 4:05:23 PM
User: N/A
Computer: SERVER-NAME
Description: Microsoft Exchange System Attendant encountered an error while processing the security data for Exchange server 'MAIL01'. Event Type: Error
Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9149
Date: 11/14/2000
Time: 4:05:23 PM
User: N/A
Computer: SERVER-NAME
Description: Microsoft Exchange System Attendant failed to start Exchange server 'MAIL01'. Error code '0x8009000f'.
Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 1005
Date: 11/14/2000
Time: 4:05:23 PM
User: N/A
Computer: SERVER-NAME
Description: Unexpected error Object already exists. ID no: 8009000f Microsoft Exchange System Attendant occurred.
CAUSE
The system attendant is having difficulty accessing the Microsoft Windows 2000 server's key container. The system attendant's first attempt to open an existing container does not work with NTE_BAD_KEYSET. The system attendant then tries to create a key container with the same name, which is rejected with NTE_EXISTS (0x8009000f) because permissions on one of these key containers is corrupted.
RESOLUTION
You need to reset the permissions on these key containers.
Note In order to view these hidden files you must turn on the Display hidden files and folders option in Windows. To display hidden files and folders, perform the following steps:
- Click Start, point to Settings, and then click Control Panel.
- Click Appearance and Themes, and then click Folder Options.
- On the View tab, under Hidden files and folders, click Show hidden files and folders.
To reset the permissions on these key containers use the following steps:
- Open Microsoft Windows 2000 Explorer.
- Locate the %SystemDrive%\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys folder.
- There are several files located in this folder. Each file in this folder corresponds to a key container. Try to open each with Notepad.
- If you receive an Access Denied error message when you try to open a file, open the properties of the file, and then take ownership of it. Reassign the Administrator account Full access.
- Repeat step four for each file in this folder. You should then be able to start the System Attendant service.
Note You must also ensure that the system account has full control of all of these files. If the System Attendant continues to not start, you may need to repeat this process on all of the domain controllers in the domain.
STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.
Additional query words: MAD exch2kp2w XADM
Keywords: kberrmsg kbbug kbnofix KB280432
