Process %1 (PID=%2). Exchange Active Directory Provider could not read attribute %3 from Root DSE of server %4. This issue must be resolved in order to allow Exchange Active Directory Provider to correctly operate.

Details
Product: Exchange
Event ID: 2137
Source: MSExchange ADAccess
Version: 8.0
Symbolic Name: DSC_EVENT_ROOTDSE_READ_FAILED
Message: Process %1 (PID=%2). Exchange Active Directory Provider could not read attribute %3 from Root DSE of server %4. This issue must be resolved in order to allow Exchange Active Directory Provider to correctly operate.
   
Explanation

This Error event may indicate that the attribute specified in the event description does not contain any value. It may also indicate that the value could not be read. Root Directory Service Entry, also known as RootDSE, is the root of the Active Directory® data tree on an Active Directory server. RootDSE attributes are used to retrieve distinguished names of the domain, schema, and configuration containers of the Active Directory. This event is caused by a missing or an invalid value in the RootDSE attribute specified in the event description.

For more information about RootDSE attributes, see RootDSE at the MSDN Web site.

   
User Action

To resolve this error, use LDP.exe to make sure that the Exchange server that logged this event can read defaultNamingContext, schemaNamingContext, configurationNamingContext and rootDomainNamingContext naming contexts from the Active Directory server. Perform the following procedure:

Before you start this procedure, you must install LDP.exe from the Support\Tools folder of the Microsoft® Windows 2000 Server or Microsoft Windows Server™ 2003 installation CD.

  1. Click Start, click Run, type ldp.exe, and then click OK.

  2. On the Connections menu in the LDP window, click Connect.

  3. In the Connect box, type the name of the Active Directory server specified in the event description, and then click OK.

    Details about the Exchange server that connects to the Active Directory server are displayed in the results pane. The output is also known as RootDSE information.

  4. Make sure that the naming context attributes, defaultNamingContext, schemaNamingContext, configurationNamingContext, and rootDomainNamingContext, display correct information. For a sample RootDSE information, see Microsoft Knowledge Base article 837964, Security issues with LDAP NULL base connections.

  5. If the naming context attributes, defaultnamingContext, schemaNamingContext, configurationNamingContext, and rootDomainNamingContext, display incorrect or invalid information, review the Application log and System log on the Active Directory and Exchange server for any corresponding Warning or Error events.

If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.

Related:

Leave a Reply