The Microsoft Exchange Information Store service is unable to start because the Active Directory attribute msExchDisableUdgConversion is not valid.

The_Microsoft_Exchange_Information_Store_service_is_unable_to_start_because_the_Active_Directory_attribute_msExchDisableUdgConversion_is_not_valid (Rule)

Knowledge Base article:

Summary

The msExchDisableUdgConversion attribute can have the following values for conversion of universal distribution groups to universal security groups:

0: Always convert UDG (Universal Distribution group) to USG (Universal Security Group)

1: Only convert UDG to USG when replicating from an Exchange 5.5 server

2: Never convert

Resolutions

Correct the value of the attribute on the Exchange organization object.

External

For more information about MSExchangeIS event 9561, see:

Element properties:

TargetMicrosoft.Exchange.ExchangeComponent.IS
CategoryEventCollection
EnabledTrue
Event_ID9561
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
The Microsoft Exchange Information Store service is unable to start because the Active Directory attribute msExchDisableUdgConversion is not valid.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="The_Microsoft_Exchange_Information_Store_service_is_unable_to_start_because_the_Active_Directory_attribute_msExchDisableUdgConversion_is_not_valid" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ExchangeComponent.IS" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>9561</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesWildcard</Operator>
<Pattern>MSExchangeIS*</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="The_Microsoft_Exchange_Information_Store_service_is_unable_to_start_because_the_Active_Directory_attribute_msExchDisableUdgConversion_is_not_valid.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>