Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 13353
  • Last Modified:

MSExchange Management Event log error

We have a single sbs2011 running exchange and every half an hour we get the following 2 errors in our MSExchange Management Event log :-

Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With Details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0312002
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'server.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context
 
   
Followed by :-


Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0780005
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'derver.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context


Can anyone advise on what this indicates, and what we need to do to resolve it??

Any help appreciated.

Many thanks.
0
nigelbeatson
Asked:
nigelbeatson
1 Solution
 
Jamie McKillopIT ManagerCommented:
Hello,

You can safely ignore this error:

Problem: The following error may be recorded in the MSExchange Management event log every 30 minutes

Log Name: MSExchange Management
Source: MSExchange CmdletLogs
Date: 12/22/2010 8:00:13 AM
Event ID: 6
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: CONTOSOSERVER.contoso.local
Description:
Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

Cause: The error is generated by the Small Business Server datacollectorservice. When the datacollectorservice runs Exchange related tasks a check is performed to determine whether or not the current user is an Exchange admin and mail-enabled. The datacollectorservice runs under the context of the local system check so the check fails and the error is generated.

Resolution: The error is benign and may be safely ignored.

Source: http://it-solutions-uk.blogspot.ca/2013/03/windows-sbs-2011-standard-known-post.html

-JJ
0
 
nigelbeatsonAuthor Commented:
many thanks - that's great.
0
 
RRautomatiseringMr.Commented:
You CAN remove the anoying errors! I cleaned them all with several tips on the net, only event 6 is not going away.

With this page you cleanup everyting, inclusing Event 2 and 6:
http://blogs.technet.com/b/sbs/archive/2012/01/16/managing-event-alerts-in-your-reports-an-sbs-monitoring-feature-enhancement.aspx
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now