MSMQ directory service failed to update flag in Active Directory during demotion process.

Microsoft.MSMQ.2008R2.Rule.Alert.Event2149 (Rule)

MSMQ directory service failed to update flag in Active Directory at the end of the domain controller demotion process.

Knowledge Base article:

Summary

MSMQ directory service failed to update flag in Active Directory at the end of the domain controller demotion process.

Causes

The Message Queuing Windows 2000 Client Support service requires the server to be a domain controller. If the domain controller is demoted to be a member server, the service may not operate properly. If this is the case, uninstall the service.

Resolutions

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Uninstall the Message Queuing Windows 2000 Client Support service:

Additional

For more information, see Event ID 2149 ( http://technet.microsoft.com/en-us/library/dd337520(WS.10).aspx)

Element properties:

TargetMicrosoft.MSMQ.2008R2.DownlevelClientsSupport
CategoryAvailabilityHealth
EnabledFalse
Event_ID2149
Event Source$Target/Property[Type="Microsoft.MSMQ.2008R2.ServerRole"]/ServiceName$
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Alert: MSMQ directory service failed to update flag in Active Directory during demotion process.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.MSMQ.2008R2.Rule.Alert.Event2149" Enabled="false" Target="Microsoft.MSMQ.2008R2.DownlevelClientsSupport" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">$Target/Property[Type="Microsoft.MSMQ.2008R2.ServerRole"]/ServiceName$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">2149</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.MSMQ.2008R2.Rule.Alert.Event2149.AlertName"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>