Home
  •  

Failed to get the SID for an account. The Microsoft Exchange Active Directory Topology service will continue starting with limited permissions.

Microsoft.Exchange2007.Common.MSExchangeADAccess.2601 (Rule)

Knowledge Base article:

External

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange2007.Component.Common
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Failed to get the SID for an account. The Microsoft Exchange Active Directory Topology service will continue starting with limited permissions.
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Exchange2007.Application.FilteredEventProvider.DS Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Exchange2007.Common.MSExchangeADAccess.2601" Enabled="onEssentialMonitoring" Target="ExLibrary!Microsoft.Exchange2007.Component.Common" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.Exchange2007.Application.FilteredEventProvider.DS">

      <EventSourceName>MSExchange ADAccess</EventSourceName>

      <EventDisplayNumber>2601</EventDisplayNumber>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="Microsoft.Exchange2007.Common.MSExchangeADAccess.2601.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>