If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.
Solved
Event ID 9385 Microsoft Exchange System Attendant failed to read the membership
Posted on 2012-12-21
I just demoted a Win2003 DC from the environment gracefully. On separet box I have Exchnage 2010 and it started giving following error. How can I fix that?
Log Name: Application
Source: MSExchangeSA
Date: 22/12/2012 8:55:09 AM
Event ID: 9385
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: EXC2010.icd.local
Description:
Microsoft Exchange System Attendant failed to read the membership of the universal security group '/dc=local/dc=icd/ou=Microsoft Exchange Security Groups/cn=Exchange Servers'; the error code was '8007203a'. The problem might be that the Microsoft Exchange System Attendant does not have permission to read the membership of the group.
If this computer is not a member of the group '/dc=local/dc=icd/ou=Microsoft Exchange Security Groups/cn=Exchange Servers', you should manually stop all Microsoft Exchange services, run the task 'add-ExchangeServerGroupMember,' and then restart all Microsoft Exchange services.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeSA" />
<EventID Qualifiers="49152">9385</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-12-21T22:55:09.000000000Z" />
<EventRecordID>545385</EventRecordID>
<Channel>Application</Channel>
<Computer>EXC2010.icd.local</Computer>
<Security />
</System>
<EventData>
<Data>/dc=local/dc=icd/ou=Microsoft Exchange Security Groups/cn=Exchange Servers</Data>
<Data>8007203a</Data>
</EventData>
</Event>
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
5
2
10 Comments
Active 6 days ago
Have you restarted the Exchange services since demoting the domain controller?
Simon.
Simon.
Hi,
I did right after post the question and waiting for another 15 minutes as it was repeating same error every 15 min. I'll give an update soon.
I did right after post the question and waiting for another 15 minutes as it was repeating same error every 15 min. I'll give an update soon.
No did not work, it still logging every 15 minutes! I have checked that Exchange 2010 server is member of the Exchange Servers group under Microsoft Exchange Security Groups.
Hi _alias99,
Before re-opening this topic again you should have read the posts, as you may see I didn't receive any follow up and solved the issue myself. Despite that I closed the topic the person's favour instead of saying delete the question! I believe giving unbalanced point also will negative impact future's cases and helpers will think what I gave is enough so no need to follow up or write more detail to solve the issue. Looks like some experts already loosing the fact and purpose and chasing the fame! (not saying to sembee2) As I said please check the posts again and evaluate your decision so that will contrubute to EE even more.
Before re-opening this topic again you should have read the posts, as you may see I didn't receive any follow up and solved the issue myself. Despite that I closed the topic the person's favour instead of saying delete the question! I believe giving unbalanced point also will negative impact future's cases and helpers will think what I gave is enough so no need to follow up or write more detail to solve the issue. Looks like some experts already loosing the fact and purpose and chasing the fame! (not saying to sembee2) As I said please check the posts again and evaluate your decision so that will contrubute to EE even more.
Active 6 days ago
You had other options other than give a C grade.
Asking for your own post to be accepted as the answer would be acceptable, you could have credited me with an assist.
As for the no follow up etc comment - two things
a. The question lifespan between my post and the one from you saying it is is resolved is less than two hours.
b. Not everyone lives in the USA - in my timezone, I posted at 11.20pm, and your postings were well past midnight. Expecting a followup in such a short space of time is unrealistic.
I did feel a C grade was unjustified, but that didn't mean I wanted all of the points. It should also be pointed out that constantly giving out C grades will mean some experts (myself included) will start to ignore your questions.
Simon.
Asking for your own post to be accepted as the answer would be acceptable, you could have credited me with an assist.
As for the no follow up etc comment - two things
a. The question lifespan between my post and the one from you saying it is is resolved is less than two hours.
b. Not everyone lives in the USA - in my timezone, I posted at 11.20pm, and your postings were well past midnight. Expecting a followup in such a short space of time is unrealistic.
I did feel a C grade was unjustified, but that didn't mean I wanted all of the points. It should also be pointed out that constantly giving out C grades will mean some experts (myself included) will start to ignore your questions.
Simon.
Featured Post
Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat. The purpose of this eBook is to educate the reader about ransomware attacks.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Let's recap what we learned from yesterday's Skyport Systems webinar.
- Ransomware
- Experts Exchange
- Skyport Systems
- Active Directory
- Security
- *privileged credentials
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month6 days, 16 hours left to enroll
704 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.