Symptoms
Consider the following scenario:
-
You enable administrator audit logging on a Microsoft Exchange Server 2010 server.
-
You successfully update the Active Directory schema on this server by using Exchange Server 2010 Service Pack 1 (SP1) build.
In this scenario, administrator audit logging on this server is disabled unexpectedly.
Note Administrator audit logging was enabled before you installed Exchange Server 2010 SP1 on this server.
Cause
This issue occurs because the ExchangeVersion attribute for administrator audit logging in the Activity Directory directory service is changed after the Activity Directory schema is updated.
Resolution
To resolve this issue, install the following update rollup:
2579150 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 1
Workaround
To work around this issue, save the following script as a .ps1 file, and then execute the .ps1 file in the Exchange Management Shell on the server:
$agent = Get-CmdletExtensionAgent "Admin Audit Log Agent";
if ($agent -eq $null)
{
Write-Host "Please run this script on an Exchange Server 2010 SP1 update rollup 4 box!" -ForegroundColor Green;
}
else
{
Write-Host "Current object version of Admin Audit Log Agent is "$agent.ExchangeVersion.ToString() -ForegroundColor Green;
if ($agent.ExchangeVersion.Major -gt 1)
{
Write-Host "Changing the object version into 1.10 (14.0.100.0)" -ForegroundColor Green;
$entry = [adsi]("LDAP://" + $agent.DistinguishedName);
$entry.msExchVersion = "1170120890224640";
$entry.CommitChanges();
Get-CmdletExtensionAgent $agent.Name | fl name, *version, issystem;
}
}
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about administrator audit logging, visit the following Microsoft website:
General information about administrator audit loggingFor more information about how to enable administrator audit logging, visit the following Microsoft website:
