XADM: An Event ID 1029 Message Is Logged After You Install Exchange 2000 Server

After you install Microsoft Exchange 2000 Server, the following event ID message may be logged in the Application event log:

This behavior can occur because the Exchange Enterprise Servers security group does not have permissions to the Manage auditing and security logs.

To resolve this behavior run setup /domainprep, and then use the Policytest utility (Policytest.exe) that is provided on the Exchange 2000 Server CD-ROM to verify that the permissions are set. Also, use the Local Security Policy tool that is located in the Administrative Tools group to verify that the Exchange Enterprise Servers security group has rights on the Manage auditing and security logs. Make sure the Exchange Enterprise Servers security group has an Effective Policy setting. To do so:

1. In the Local Security Policy tool folder, click to expand Local Policies.
2. Click to expand User Right Assignments, and then double-click Manage auditing and security logs.
3. Make sure that the Effective Policy Setting checkbox is selected for the Exchange Enterprise Servers security group.