I have client who counter strange issue on one of their Exchange 2010 Mailbox Server running on Windows Server 2008 R2. The Windows Event Log services was unable to started even after reboot. The error message was "Error 5: Access Denied". The Exchange services unable to started due to Windows Event Log issue. Have tried few KB articles and support to check permission on winevt\logs folder but no avail. Glad that the Mailbox have another set of copies on the other server. But just worried if something happened to the other server.
3 x Ex2k10 CAS/HT
4 x Ex2k10 Mailbox
Windows: 2008 R2 SP1
AV: Trend Micro OfficeScan / ScanMail for Exchange
Any ideas guys?