Solved

MSExchange Management Event log error

Posted on 2014-02-18
3
10,606 Views
Last Modified: 2015-11-19
We have a single sbs2011 running exchange and every half an hour we get the following 2 errors in our MSExchange Management Event log :-

Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With Details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0312002
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'server.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context
 
   
Followed by :-


Error      18/02/2014 14:30:00      MSExchange CmdletLogs      6      General

Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

With details :-

Get-User
   {Identity=NT AUTHORITY\SYSTEM}
   hds1.local/Domain Controllers/SBS2011
   S-1-5-21-177518626-3322050215-1828347314-1014
   S-1-5-21-177518626-3322050215-1828347314-1014
   ServerRemoteHost-Unknown
   6240
   
   13
   00:00:00.0780005
   View Entire Forest: 'False', Default Scope: 'domain.local', Configuration Domain Controller: 'server.domain.local', Preferred Global Catalog: 'derver.domain.local', Preferred Domain Controllers: '{ server.domain.local }'
   Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'NT AUTHORITY\SYSTEM' couldn't be found on 'server.domain.local'.
   Context


Can anyone advise on what this indicates, and what we need to do to resolve it??

Any help appreciated.

Many thanks.
0
Comment
Question by:nigelbeatson
3 Comments
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
Comment Utility
Hello,

You can safely ignore this error:

Problem: The following error may be recorded in the MSExchange Management event log every 30 minutes

Log Name: MSExchange Management
Source: MSExchange CmdletLogs
Date: 12/22/2010 8:00:13 AM
Event ID: 6
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: CONTOSOSERVER.contoso.local
Description:
Cmdlet failed. Cmdlet Get-User, parameters {Identity=NT AUTHORITY\SYSTEM}.

Cause: The error is generated by the Small Business Server datacollectorservice. When the datacollectorservice runs Exchange related tasks a check is performed to determine whether or not the current user is an Exchange admin and mail-enabled. The datacollectorservice runs under the context of the local system check so the check fails and the error is generated.

Resolution: The error is benign and may be safely ignored.

Source: http://it-solutions-uk.blogspot.ca/2013/03/windows-sbs-2011-standard-known-post.html

-JJ
0
 

Author Closing Comment

by:nigelbeatson
Comment Utility
many thanks - that's great.
0
 

Expert Comment

by:RRautomatisering
Comment Utility
You CAN remove the anoying errors! I cleaned them all with several tips on the net, only event 6 is not going away.

With this page you cleanup everyting, inclusing Event 2 and 6:
http://blogs.technet.com/b/sbs/archive/2012/01/16/managing-event-alerts-in-your-reports-an-sbs-monitoring-feature-enhancement.aspx
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now