This article was previously published under Q262383
This article has been archived. It is offered "as is" and will no longer be updated.
An event error message may be logged in the System event log during a failover of an Exchange service:
Event Type: Error Event Source: ClusSvc Event ID: 1121 Description: The crypto checkpoint for cluster resource 'sa1' could not be restored to the container name 'EXPWMGMT-44a028991371419ebf3cc0661fafe7c1'. The resource may not function correctly. Data: 0000: 05 00 00 00
This problem can occur because every time that a cluster starts a resource (for example, during a failover), the cluster restores the registry key in which the cluster states from the last known good state are kept. A security descriptor is set on the key container, by default, to which the local system account has full privileges, but to which administrators have read-only privileges. The first time that a failover occurs, the key file is created and the security descriptor is set. The next time that a failover occurs, the key container already exists, but the cluster checkpoint code updates the key anyway. Because the key container has a security descriptor that does not allow the key container to be overwritten by the cluster service account, the cluster falls back to the restore privilege and updates the key. Then the security descriptor is set, but there is no fallback with the restore privilege in this case, therefore restoration does not work and generates the error message in the System event log.
To resolve this problem, please contact Microsoft Product Support Services for assistance.
The latest service pack contains fixes that prevent the problem from recurring once it has been repaired. For additional information about how to obtain the latest Service Pack for Microsoft Exchange 2000 Server, click the article number below to view the article in the Microsoft Knowledge Base:
301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.
NOTE: Installing Service Pack 2 will protect the server from developing this problem in the future, but will not repair existing incorrect checkpoint permissions. For additional information about how to fix checkpoint permissions, click the following article number to view the article in the Microsoft Knowledge Base:
307469 Restore Registry Check Points Stop Working After You Restore a Server Cluster
The cause of this error message has no impact on the operation of the resources that are running in the cluster, and you can safely ignore this error message.