Home
  •  

System Attendant failed to add the local computer as a member of the Active Directory service group object.

System_Attendant_failed_to_add_the_local_computer_as_a_member_of_the_Active_Directory_service_group_object (Rule)

Knowledge Base article:

Summary

This event indicates that the System Attendant has detected that the local computer is not a member of the Exchange Domain Servers security group and failed to add it to that group.

Sample Event:

Event ID: 9187

Source: MSExchangeSystem Attendant

Type: Error

Category: General

Description: Microsoft Exchange System Attendant failed to add the local computer as a member of the DS group object cn=Exchange Domain Servers,cn=Users,dc=Domain,dc=com. Please stop all the Microsoft Exchange services, add the local computer into the group manually and restart all the services.

Related Events:

An Event ID 9186, as shown below, may precede this 9187 event.

Event ID: 9186

Source: MSExchangeSystem Attendant

Type: Warning

Category: General

Description: Microsoft Exchange System Attendant has detected that the local computer is not a member of group cn=Exchange Domain Servers,cn=Users,dc=Domain,dc=com. System Attendant is going to add the local computer into the group.

Causes

While there may be other causes of this error, it can happen because the distinguished name of the server has changed. This change in the distinguished name can happen because the computer may have been moved to another organizational unit (OU) in Active Directory. This error may show up if even if the server is in the Exchange Domain Servers security group.

Resolutions

Stop all Exchange services. If necessary, add the local computer to the Exchange Domain Servers security group and restart the System Attendant service manually. Note that this will cause the Microsoft Exchange Information Store service to restart.

External

For more information about MSExchangeSA event 9187, see:

Element properties:

TargetMicrosoft.Exchange.ExchangeComponent.SystemAttendant
CategoryEventCollection
EnabledTrue
Event_ID9187
Event SourceMSExchangeSA
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
System Attendant failed to add the local computer as a member of the Active Directory service group object.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="System_Attendant_failed_to_add_the_local_computer_as_a_member_of_the_Active_Directory_service_group_object" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ExchangeComponent.SystemAttendant" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>MSExchangeSA</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>9187</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="System_Attendant_failed_to_add_the_local_computer_as_a_member_of_the_Active_Directory_service_group_object.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>