My Exchange servers developed an interesting problem over the weekend.
When I got to work this morning the Exchange Administrator account was
locked out. The following events are logged around the time when the
account gets locked out and I am unable to find any information in the
Knowledge Base that seems to apply.
(names change to protect the innocent)
In the Security log of my AD controllers:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 02/17/2003
Time: 8:19:18 AM
User: NT AUTHORITY\SYSTEM
Computer: AD1
Description:
Logon Failure:
Reason: An unexpected error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -
In the application log of each of my 3 Exchange 2000 SP3 servers:
Event Type: Error
Event Source: MSExchangeFBPublish
Event Category: General
Event ID: 8213
Date: 02/17/2003
Time: 7:56:51 AM
User: N/A
Computer: MAIL1
Description:
System Attendant Service failed to create session for virtual machine
MAIL1. The error number is 0xc0070775.
A search of the Knowledge Base on Event ID 537 returns no useful
articles and the KB articles on 8213 don't seem to apply. I cannot seem
to find an event that lead up to this problem.
Has anybody seen this before or could you point me in the right
direction?
Thanks,
-Matt
Matthew Bailey
LAN Engineer
CSK Auto, Inc.
[EMAIL PROTECTED]
Office: (602) 631-7486
Fax: (602) 294-7486
----------------------------------------
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.
----------------------------------------
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
