One or more servers in an Exchange Server routing group cannot connect to the routing group master

You may experience one or more of the following symptoms in a Microsoft Exchange Server organization:

�	All the servers in a particular routing group cannot connect to the routing group master. Also, the routing group master cannot connect to itself.
�	A particular server in the routing group cannot connect to the routing group master.
�	The following event may be logged in the Security log: Event ID: 534 Event Source: Security Event Category: Logon/Logoff Event Type: Failure User: NT Authority\System Computer: ServerName Description: The user has not been granted the requested logon type at this machine username: ServerName$ Domain: Intra Logon type: 3 Logon process: ntlmssp
�	If you use the Regtrace tool to obtain routing information from the affected Exchange server, the resultant trace file contains the following information from DMON.CPP: fConnectedToMaster=0

This problem may occur if the Authenticated Users group has been removed from the Access this computer from the network user right.

To resolve this problem, grant the Authenticated Users group the Access this computer from the network user right. To do this, follow these steps:

1.	Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2.	Expand Local Policies, and then click User Rights Assignment.
3.	In the right pane, double-click Access this computer from network.
4.	In the Local Security Policy Setting dialog box, look for Authenticated Users in the Assigned To list. If this item does not appear in the list, add the Authenticated Users group. To do this, follow these steps: a. Click Add, type authenticated users, click Check Names, and then click OK. b. In the Assigned To box, click to select the Local Policy Setting check box that is displayed next to Authenticated Users. c. Click OK.
5.	Exit the Local Security Settings MMC snap-in.
6.	Update the local security policy on the computer. To do this, click Start, click Run, type secedit /refreshpolicy machine_policy /enforce, and then click OK.
7.	Follow steps 1 through 6 on every computer that is a member of the routing group to verify that the Authenticated Users group has the Access this computer from the network user right assigned.

For the routing group master to connect to itself, the Authenticated Users group requires the Access this computer from the network user right. Additionally, all the computers in the Exchange organization that are running Microsoft Exchange 2000 Server or Microsoft Exchange Server 2003 require this user right assignment. This user right assignment is required to let the routing group master transfer routing group packets to the other Exchange servers. These packets are transferred by using a push operation from the routing group master over port 691.

For more information about how to determine which server is configured as the routing group master, click the following article number to view the article in the Microsoft Knowledge Base: For more information about the Regtrace utility, click the following article number to view the article in the Microsoft Knowledge Base: For more information about how to configure a routing group connector, click the following article number to view the article in the Microsoft Knowledge Base: For more information, click the following article number to view the article in the Microsoft Knowledge Base: For more information, click the following article number to view the article in the Microsoft Knowledge Base: