Directory Service Access failure audit

[pirateclem]

For some reason I am getting a Failure Audit every 1 minute in my security log on my primary domain controller. My exchange server is attempting to access AD to change something but failing. The error makes no sense to me. It is an error code 565, category directory service access. User is "my exchange server's name"$ and the computer is "my domain contoller". The content of the error is:

Object Server: DS
Object type: configuration
Object Name: CN=Configuration,DC="my domain"...etc.
Operation ID: {0,104419881}
Primary User name: "my domain contoller's name"$
blah blah
Client User Name: "my exchange server's name"$
blah blah
Accsses: Control Access

Properties:
Delete
Write Property
Manage Replication Technology




HELP!

 

[wdoellefeld]

Sounds like a permisson was changed or setup wrong somewhere along the way. You parsed down the error message a little too much for me to be sure but it sounds like you might want to rerun exchange domainprep again. It doesn't hurt anything and basically sets the permissions back to default.


FRCP

http://www.frcp.net

 

[pirateclem]

I have a Cisco VoIP system with a Unity hook into Exchange so I might look into that before I run the domainprep again, but thats a good idea. Thanks for the advice.