Removal of privileges from process “%1” (PID=%2, LABEL=%3) failed with error code %4.

Product: Exchange
Event ID: 579
Source: MSExchange Common
Version: 8.0
Symbolic Name: PrivilegeRemovalFailure
Message: Removal of privileges from process “%1” (PID=%2, LABEL=%3) failed with error code %4.

This Error event indicates that unnecessary privileges could not be removed from the process specified in the event description. Some processes obtain elevated privileges during installation which are not required during normal operation. This event may occur when removal of such unnecessary privileges fails.

User Action

To resolve this error, follow one of more of these steps:

  • Increase the diagnostic logging level on the General counter of the MSExchange Common performance object. You can increase logging by running the following Exchange Management Shell command:

    Set-EventLogLevel “MSExchange Common\General” -Level High

    For more information about increasing diagnostic logging levels, see How to Change Logging Levels for Exchange Processes.

  • Review other related Error and Warning events in the Application log. These related events may help you find the root cause of this error.

    Important   After you have completed troubleshooting this issue, return logging to the default level by running the following command:

    Set-EventLogLevel “MSExchange Common\General” -Level Lowest

  • If this event seems to be causing mail flow interruptions or other problems in your Exchange environment, contact Microsoft Product Support Services. For information about how to contact support, visit the Microsoft Help and Support Web site.

If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.


Leave a Reply