• Article

Disabled user does not have a master account SID

 

Topic Last Modified: 2007-11-16

The Microsoft Exchange Server 2007 Management Pack for Operations Manager monitors the Windows Application log on computers that are running Exchange Server 2007 and generates this alert when the event or events specified in the following Details table are logged.

To learn more about this alert, if you are using Microsoft Operations Manager 2005, do one or more of the following:

  • From the Operator Console, select this alert, and then click the Properties tab. Review the description of the alert that includes the variables specific to your environment.

  • From the Operator Console, click the Events tab, and then double-click the event in the list for which you want to review the event description. Review the events that have been logged that meet the criteria of this Operations Manager alert.

To learn more about this alert, if you are using System Center Operations Manager 2007, do one or more of the following:

  • From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.

  • From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the events that have been logged that meet the criteria of this Operations Manager alert.

Details

Product Name

Exchange

Product Version

8.0 (Exchange Server 2007)

Event ID

9548

Event Source

MSExchangeIS*

Alert Type

Warning

MOM Rule Path

Microsoft Exchange Server/Exchange 2007/Mailbox/Information Store

MOM Rule Name

Disabled user does not have a master account SID. Use Active Directory Users and Computers console to set an active account as this user's master account.

Explanation

This Warning event indicates an attempt to add a resource account to an access control list (ACL) failed because resource accounts do not have associated user accounts. For specific resources, see the events associated with this alert.

A disabled user does not have a master account security identifier (SID). (The attribute name is msExchMasterAccountSID.) This can occur for several reasons, including but not limited to:

  • The master account SID could have been deleted directly using the -LinkedMasterAccount parameter of the Set-Mailbox cmdlet in the Exchange Management Shell.

  • The account may have been created incorrectly initially.

  • The account may have been partially deleted, with its mailbox rights removed, but still retaining HomeMDB and other attributes.

User Action

To resolve this warning, do one of the following:

  • To keep and repair the account, do either of the following:

    • Use the Active Directory directory service Microsoft Management Console (MMC) to try and enable the account.

    • Use the -LinkedMasterAccount parameter of the Set-Mailbox cmdlet in the Exchange Management Shell to assign another account with mailbox rights as the external associated account for the problem account. This could be simply the Self account for the damaged account.

  • To discard the damaged account, either completely delete the account or at least remove the HomeMDB attribute for it. (Removing the HomeMDB attribute will make the account invisible to Exchange).

For More Information

To search the Microsoft Knowledge Base articles based on criteria that generated this alert, visit the Search the Support Knowledge Base (KB) Web site.

To review Exchange Server 2007 event message articles that may not be represented by Exchange 2007 alerts, see the Events and Errors Message Center.

If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.