none
event id 5000 MSExchange Management Application RRS feed

  • Вопрос

  • Добрый день
    Коллеги у меня Exchange 2013 Cu11

    Не могу найти решение данной проблемы, кто может знает или встречался

    Заранее большое спасибо

    Log Name:      Application
    Source:        MSExchange Management Application
    Date:          6/9/2016 4:12:47 PM
    Event ID:      5000
    Task Category: AdminAuditLog
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      ala.ala.kz
    Description:
    Failed to save admin audit log for this cmdlet invocation.
    Organization: First Organization
    Log content:
    Cmdlet Name: Update-Recipient
    Object Modified:ala.kz/Branches/ala/Users and Groups/Сотрудники ala/Альберт
    Parameter: Identity = ala.kz/Branches/ala/Users and Groups/Сотрудники ala/Альберт
    Parameter: DomainController =
    Caller: ala.kz/Service Accounts And Groups/admin
    ExternalAccess: False
    Succeeded: True
    Run Date: 2016-06-09T10:12:47
    OriginatingServer: ALA (15.00.1156.000)

    Error:
    Microsoft.Exchange.Data.ApplicationLogic.AuditLogAccessDeniedException: The requesting account doesn't have permission to access the audit log. ---> System.Web.Services.Protocols.SoapException: The requesting account does not have permission to serialize tokens.
       at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
       at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at Microsoft.Exchange.SoapWebClient.EWS.ExchangeServiceBinding.GetFolder(GetFolderType GetFolder1)
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.<>c__DisplayClasse.<CheckAndCreateWellKnownFolder>b__6()
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CheckAndCreateWellKnownFolder(DistinguishedFolderIdNameType parentFolder, DistinguishedFolderIdNameType targetFolder, FolderIdType& targetFolderId)
       at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger.InitializeAdminAuditLogsFolder()
       at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger..ctor(ExchangePrincipal principal)
       at Microsoft.Exchange.ProvisioningAgent.AuditLoggerFactory.Create(ExchangePrincipal principal, ArbitrationMailboxStatus status)
       at Microsoft.Exchange.ProvisioningAgent.ConfigWrapper.get_MailboxLogger()
       at Microsoft.Exchange.ProvisioningAgent.AdminLogProvisioningHandler.WriteAuditRecord(Stopwatch stopwatch)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange Management Application" />
        <EventID Qualifiers="49152">5000</EventID>
        <Level>2</Level>
        <Task>5</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2016-06-09T10:12:47.000000000Z" />
        <EventRecordID>86372297</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ala.kz</Computer>
        <Security />
      </System>
      <EventData>
        <Data>Cmdlet Name: Update-Recipient
    Object Modified: ala.kz/Branches/ala/Users and Groups/Сотрудники ala/Альберт
    Parameter: Identity = ala.kz/Branches/ala/Users and Groups/Сотрудники ala/Альберт

    Parameter: DomainController =
    Caller: ala.kz/Service Accounts And Groups/admin
    ExternalAccess: False
    Succeeded: True
    Run Date: 2016-06-09T10:12:47
    OriginatingServer: ALA (15.00.1156.000)
    </Data>
        <Data>First Organization</Data>
        <Data>Microsoft.Exchange.Data.ApplicationLogic.AuditLogAccessDeniedException: The requesting account doesn't have permission to access the audit log. ---&gt; System.Web.Services.Protocols.SoapException: The requesting account does not have permission to serialize tokens.
       at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
       at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at Microsoft.Exchange.SoapWebClient.EWS.ExchangeServiceBinding.GetFolder(GetFolderType GetFolder1)
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.&lt;&gt;c__DisplayClasse.&lt;CheckAndCreateWellKnownFolder&gt;b__6()
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
       at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CheckAndCreateWellKnownFolder(DistinguishedFolderIdNameType parentFolder, DistinguishedFolderIdNameType targetFolder, FolderIdType&amp; targetFolderId)
       at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger.InitializeAdminAuditLogsFolder()
       at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger..ctor(ExchangePrincipal principal)
       at Microsoft.Exchange.ProvisioningAgent.AuditLoggerFactory.Create(ExchangePrincipal principal, ArbitrationMailboxStatus status)
       at Microsoft.Exchange.ProvisioningAgent.ConfigWrapper.get_MailboxLogger()
       at Microsoft.Exchange.ProvisioningAgent.AdminLogProvisioningHandler.WriteAuditRecord(Stopwatch stopwatch)</Data>
      </EventData>
    </Event>

     
    9 июня 2016 г. 10:21

Ответы

  • Всем большое спасибо, но дело было в учетной записи, запустил от другого имени и все стало ок!
    Сейчас буду разбираться по правам, хотя моя учетная запись находится в группе Enterprise Admins
    • Помечено в качестве ответа Denisk (dk) 10 июня 2016 г. 11:47
    10 июня 2016 г. 11:47

Все ответы