Solved

MSExchange Management Event log error

Posted on 2014-02-18
3
10,909 Views
Last Modified: 2015-11-19
We have a single sbs2011 running exchange and every half an hour we get the following 2 errors in our MSExchange Management Event log :-

Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With Details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0312002
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'server.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context
 
   
Followed by :-


Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0780005
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'derver.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context


Can anyone advise on what this indicates, and what we need to do to resolve it??

Any help appreciated.

Many thanks.
0
Comment
Question by:nigelbeatson
3 Comments
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 39870099
Hello,

You can safely ignore this error:

Problem: The following error may be recorded in the MSExchange Management event log every 30 minutes

Log Name: MSExchange Management
Source: MSExchange CmdletLogs
Date: 12/22/2010 8:00:13 AM
Event ID: 6
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: CONTOSOSERVER.contoso.local
Description:
Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

Cause: The error is generated by the Small Business Server datacollectorservice. When the datacollectorservice runs Exchange related tasks a check is performed to determine whether or not the current user is an Exchange admin and mail-enabled. The datacollectorservice runs under the context of the local system check so the check fails and the error is generated.

Resolution: The error is benign and may be safely ignored.

Source: http://it-solutions-uk.blogspot.ca/2013/03/windows-sbs-2011-standard-known-post.html

-JJ
0
 

Author Closing Comment

by:nigelbeatson
ID: 39870104
many thanks - that's great.
0
 

Expert Comment

by:RRautomatisering
ID: 41276594
You CAN remove the anoying errors! I cleaned them all with several tips on the net, only event 6 is not going away.

With this page you cleanup everyting, inclusing Event 2 and 6:
http://blogs.technet.com/b/sbs/archive/2012/01/16/managing-event-alerts-in-your-reports-an-sbs-monitoring-feature-enhancement.aspx
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now