Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Events 8213/MSExchangeFBPublish and 9153/MSExchangeSA logged

Status
Not open for further replies.

GuidovK

Technical User
Sep 15, 2005
10
0
0
NL
Hello

I have been hired by a small company to administer their network and I have
noticed several errors in the Windows Application Event Log.

The following error is logged every 25 minutes.
Event:8213
Source: MSExchangeFBPublish
Description: System Attendant Service failed to create session for virtual
machine SRV-NAME. The error number is 0x80072030.

The following error is logged every 13 minutes.
Event:9153
Source: MSExchangeSA
Description: Microsoft Exchange System Attendant reported an error
'0x80072030' when setting DS notification.

The company has one Windows 2000 SP4 server and one Windows 2003 SP1 server.
Both run AD, WINS and DNS and both are GC's. The Windows 2003 server also
runs Exchange 2003 SP2 (6.5 Build 7638.2). The Windows 2003 server is a
recent addition and it replaced an NT4 server running Exchange 5.5. As far as
I know the errors started a couple of days after the addition of the new
server.

Asides from the errors in the log, the server seems to be functioning OK, so
users don't seem to experience any negative results caused by the errors.

I've checked the registry as mentioned in KB310440
and the keys are present. I've also run DCdiag on both DC's but I
don't see any problems there either.

DCDiag log for the Exchange Server Box:
----------------------------------------------------------------------------------------------
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: MySite\MYSRVR
Starting test: Connectivity
......................... MYSRVR passed test Connectivity

Doing primary tests

Testing server: MySite\MYSRVR
Starting test: Replications
......................... MYSRVR passed test Replications
Starting test: Topology
......................... MYSRVR passed test Topology
Starting test: CutoffServers
......................... MYSRVR passed test CutoffServers
Starting test: NCSecDesc
......................... MYSRVR passed test NCSecDesc
Starting test: NetLogons
......................... MYSRVR passed test NetLogons
Starting test: Advertising
......................... MYSRVR passed test Advertising
Starting test: KnowsOfRoleHolders
......................... MYSRVR passed test KnowsOfRoleHolders
Starting test: RidManager
......................... MYSRVR passed test RidManager
Starting test: MachineAccount
......................... MYSRVR passed test MachineAccount
Starting test: Services
......................... MYSRVR passed test Services
Starting test: OutboundSecureChannels
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... MYSRVR passed test OutboundSecureChannels
Starting test: ObjectsReplicated
......................... MYSRVR passed test ObjectsReplicated
Starting test: frssysvol
......................... MYSRVR passed test frssysvol
Starting test: frsevent
......................... MYSRVR passed test frsevent
Starting test: kccevent
......................... MYSRVR passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2006 22:23:40
(Event String could not be retrieved)
......................... MYSRVR failed test systemlog
Starting test: VerifyReplicas
......................... MYSRVR passed test VerifyReplicas
Starting test: VerifyReferences
......................... MYSRVR passed test VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... MYSRVR passed test
VerifyEnterpriseReferences
Starting test: CheckSecurityError
[MYSRVR] No security related replication errors were found on this
DC! To target the connection to a specific source DC use /ReplSource:<DC>.
......................... MYSRVR passed test CheckSecurityError

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MYDOMAIN
Starting test: CrossRefValidation
......................... MYDOMAIN passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MYDOMAIN passed test CheckSDRefDom

Running enterprise tests on : MYDOMAIN.COM
Starting test: Intersite
......................... MYDOMAIN.COM passed test Intersite
Starting test: FsmoCheck
......................... MYDOMAIN.COM passed test FsmoCheck
Starting test: DNS
Test results for domain controllers:

DC: MYSRVR.MYDOMAIN.COM
Domain: MYDOMAIN.COM


TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but not
secure MYDOMAIN.COM.

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg
Ext

________________________________________________________________
Domain: MYDOMAIN.COM
MYSRVR PASS PASS PASS PASS WARN PASS n/a

......................... MYDOMAIN.COM passed test DNS

----------------------------------------------------------------------------------------------

DCDiag log for the other Server:
----------------------------------------------------------------------------------------------
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: MySite\MyOtherServer
Starting test: Connectivity
......................... MyOtherServer passed test Connectivity

Doing primary tests

Testing server: Scherpenzeel\MyOtherServer
Starting test: Replications
......................... MyOtherServer passed test Replications
Starting test: Topology
......................... MyOtherServer passed test Topology
Starting test: CutoffServers
......................... MyOtherServer passed test CutoffServers
Starting test: NCSecDesc
......................... MyOtherServer passed test NCSecDesc
Starting test: NetLogons
......................... MyOtherServer passed test NetLogons
Starting test: Advertising
......................... MyOtherServer passed test Advertising
Starting test: KnowsOfRoleHolders
......................... MyOtherServer passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... MyOtherServer passed test RidManager
Starting test: MachineAccount
......................... MyOtherServer passed test MachineAccount
Starting test: Services
......................... MyOtherServer passed test Services
Starting test: OutboundSecureChannels
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... MyOtherServer passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
......................... MyOtherServer passed test ObjectsReplicated
Starting test: frssysvol
......................... MyOtherServer passed test frssysvol
Starting test: kccevent
......................... MyOtherServer passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2006 22:36:58
Event String: Driver hp psc 1300 series required for printer

An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2006 22:36:58
Event String: The printer could not be installed.
......................... MyOtherServer failed test systemlog

Running enterprise tests on : MYDOMAIN.COM
Starting test: Intersite
......................... MYDOMAIN.COM passed test Intersite
Starting test: FsmoCheck
......................... MYDOMAIN.COM passed test FsmoCheck
----------------------------------------------------------------------------------------------
The event log errors are due to me logging in through terminal services.



I have searched the net for some time for what could be causing this.
However, so far I've been unable to resolve the issue.
Does anyone have any idea what could be causing these errors and how to
resolve them?

Thanks in advance,

Guidovk
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top