System Attendant does not start after disaster recovery installation, and event ID 9022, 9149, 1005 messages occur

View products that this article applies to.

This article was previously published under Q325674

SYMPTOMS

After you run an Exchange disaster recovery installation, System Attendant may not start, and you may receive the following event ID messages:

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9022
Description:
Microsoft Exchange System Attendant encountered an error while processing the security data for Exchange server '<SERVERNAME>'.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9149
Description:
Microsoft Exchange System Attendant failed to start Exchange server '<SERVERNAME>'. Error code '0x80070005'.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 1005
Description:
Unexpected error Access denied. Facility: LDAP Provider ID no: 80070005 Microsoft Exchange System Attendant occurred.

Back to the top

CAUSE

This issue may occur if the server account does not have the correct permissions on the Exchange server container in Active Directory.

Back to the top

RESOLUTION

To resolve this issue, use ADSI Edit to grant the correct permissions for the server account on the Exchange server container in Active Directory.

ADSI Edit is located in the Support\Tools folder of the Windows 2000 or Windows Server 2003 CD. To install Windows 2000 or Windows Server 2003 Support Tools, follow these steps:

Insert the Windows 2000 Server or Windows Server 2003 CD in your CD-ROM drive.
Click No if you are prompted to reinstall Windows 2000 Server or Windows Server 2003.
Open the Support/Tools folder. For complete setup information, see the Sreadme.doc file that is available in this folder.
Double-click Setup.exe or suptools.msi.
Follow the instructions that appear on your screen.

Back to the top

How to Use ADSI Edit to Grant the Correct Permissions

Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

Start ADSI Edit.
1. Click Start, click Run, type adsiedit.msc, and then click OK.
2. Click Tools, and then click ADSI Edit.
Expand Configuration, expand Configuration (CN=Configuration,DC=domain,DC=com), expand Services, and then expand Microsoft Exchange.
Expand OrganizationName, expand Administrative Groups, expand AdministrativeGroupName, and then expand Servers.
Right-click Server Name, and then click Properties.
Click the Security tab, verify that the server object is in the list of accounts with rights, and then verify that the Allow check box for Full Control is selected. If this permission is not selected, click to select the Allow check box for Full Control, and then click OK.
Quit ADSI Edit.
Wait for the change to replicate among the domain controllers.
Start System Attendant.

Back to the top

REFERENCES

For more information about what to do when the computer account for the Exchange Server computer has been deleted or lost or does not have Full Control permissions to the Exchange Server computer object in Active Directory, click the following article number to view the article in the Microsoft Knowledge Base:

297295 (http://support.microsoft.com/kb/297295/ ) The computer account for Exchange Server is absent

Back to the top