• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1753
  • Last Modified:

Unable to start Microsoft Exchange 2003 System Attendant service after making change in Group Policy...

I made a change in Windows 2003 Group Policy and moved the computer object for our Exchange Server 2003 to another organizational unit.  After that move, I started getting the following error

Microsoft Exchange System Attendant failed to add the local computer as a member of the DS group object 'cn=Exchange Domain Servers,cn=Users,dc=ircpa,dc=org'.

I never moved any of the Exchange objects out of the default Users container and I am thinking that I have corrupted or disabled something else or removed some permissions that the MSExchangeSA needs.  
Any ideas ...
0
ircpamanager
Asked:
ircpamanager
  • 4
  • 3
1 Solution
 
rakeshmiglaniCommented:
did you move the computer account back?
check the group membership of the exchange domain servers group, do you see the exchange server name in it?
0
 
ircpamanagerAuthor Commented:
Yes, I moved the computer account back to the default Computer group.  And the Exchange computer is in the Exchange Domain Servers group.  Last night, I did many of the things suggested in various Knowledge Base articles such as removing the Exchange computer object from the Exchange Domain Servers group, readding it back, and then restarting the Exchange services.  Nothing seemed to work.

 I decided that the problem may be due to some type of permission problem.  One of the things that I had done when I was making changes to my OU's was I removed the Exchange Server from a Domain Controllers OU and moved it to a Domain Servers OU.  That is when all of my problems started.  This morning, I added the Exchange Server back to Domain Controllers OU abd rebooted the Exchange Server.  I am still getting the pair of Warning / Errors (Event ID 9186 and 9187) with MSExchangeSA but Outlook and the email system seems to work now.  The Warning / Error pair I am still getting is listed below.  Thanks for your response.

Warning:
Event Type:      Warning
Event Source:      MSExchangeSA
Event Category:      General
Event ID:      9186
Date:            10/15/2007
Time:            8:24:21 AM
User:            N/A
Computer:      PA-EXCH1
Description:
Microsoft Exchange System Attendant has detected that the local computer is not a member of group 'cn=Exchange Domain Servers,cn=Users,dc=ircpa,dc=org'. System Attendant is going to add the local computer into the group.

The current members of the group are 'CN=BKExec2,OU=IT,DC=ircpa,DC=org; CN=Administrator,OU=IT,DC=ircpa,DC=org; '.
=========================================================================
Error:
Event Type:      Error
Event Source:      MSExchangeSA
Event Category:      General
Event ID:      9187
Date:            10/15/2007
Time:            8:24:21 AM
User:            N/A
Computer:      PA-EXCH1
Description:
Microsoft Exchange System Attendant failed to add the local computer as a member of the DS group object 'cn=Exchange Domain Servers,cn=Users,dc=ircpa,dc=org'.

Please stop all the Microsoft Exchange services, add the local computer into the group manually and restart all the services.

=========================================================================


0
 
rakeshmiglaniCommented:
does that mean that the system attendant service is now started?
try to check the group properties from the DC as it could be a replication delay of the group membership updation.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
ircpamanagerAuthor Commented:
Yes, the MSExchangeSA service is now started but is generating the Warning (Event ID 9186) / Error (Event ID 9187) pair of messages on the Exchange server every 15 minutes.  

In the AD Users and Computers, under the "Exchange Domain Servers Properties" dialog, the Exchange server computer object is listed as a member of this group.  
                Name:             Active Directory/Folder
User Administrator          ircpa.org/IT
Computer PA-EXCH1      ircpa.org/Computers

Regarding the User "Exchange Service Account", what Group should this be a member of?  Currently, this user account is only a member of "Domain Users"

0
 
rakeshmiglaniCommented:
add it to the exchange domain servers group, it should not cause any problem
0
 
ircpamanagerAuthor Commented:
I have done all of the above.  However, I am still getting this pair of errors ( Warning (Event ID 9186) / Error (Event ID 9187) )  every 15 minutes.
0
 
rakeshmiglaniCommented:
http://support.microsoft.com/kb/271335 states that all the steps that have been carried out should have resolved the problem
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now