The Microsoft Exchange Internet Mail Service does not start in Exchange 2000 and in Exchange Server 5.5 (888031)

SYMPTOMS

You may experience one or more of the following symptoms on a computer that is running Microsoft Exchange Server 5.5 or Microsoft Exchange 2000 Server:

The Internet Mail Service does not start. You cannot start the service manually, and you receive the following error code:
Error 1331
The following event is logged in the Application log:Event ID: 7000
Event Source: Service Control Manager
Description: The Microsoft Exchange Internet Mail Service service failed to start due to the following error:
Logon failure: account currently disabled.
You cannot log on to the computer locally or remotely.
Other Exchange-related services may also stop functioning.

CAUSE

This issue may occur when the following conditions are true:

You are running the Computer Associates eTrust Antivirus program on the Exchange Server computer.
The Realtime Monitor feature in the eTrust Antivirus program is enabled.
In the Realtime Monitor Options dialog box, the Activate Quarantine check box is selected on the Quarantine tab.

This issue occurs when the eTrust Antivirus program determines that the site services account that the Exchange Server services runs under tries to access or to move a file that is infected with a computer virus. The eTrust Antivirus program may prevent this account from accessing the Exchange Server computer.

MORE INFORMATION

For additional information about this issue, visit the following Computer Associates Web site:

http://esupport.ca.com/index.html?/public/antivirus/infodocs/inoc7_faq.asp

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

RESOLUTION

To resolve this issue, remove the site services account from the eTrust Antivirus quarantine list. To do this, follow these steps:

On the Exchange Server computer, right-click the Realtime Monitor icon in the notification area, and then click Realtime Options.
Click the Quarantine tab, click the site services account in the List of Quarantine Users list, and then click Remove.

MORE INFORMATION

The following table describes error code 1331.

Code	Description	Name
1331	Logon failure: account currently disabled.	ERROR_ACCOUNT_DISABLED

For more information about Microsoft Windows error codes, visit the following Microsoft Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/debug/base/system_error_codes__1300-1699_.asp

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.