: You Cannot Install a Second Exchange 2000 Server in an Exchange 2000 Server Site and Event ID 9525, 1121, and 5000 Error Messages Are Logged (305392)


The information in this article applies to:

  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition
  • Microsoft Exchange 2000 Server
  • Microsoft Windows Small Business Server 2003, Premium Edition
  • Microsoft Windows Small Business Server 2003, Standard Edition
This article was previously published under Q305392

SYMPTOMS

If you try to install a second Exchange server in an administrative group that already contains an Exchange server, you may not be able to install the second server. The information store may not start, and the following messages may be logged in the Application event log:
Event ID: 9525
Event Source: MSExchangeIS
Event Category: General
Description: The Microsoft Exchange Information Store was unable to look up the Globally Unique Identifier for: /DC=COM/DC=domain. The error code is 0x8004010f.
For more information, click http://search.support.microsoft.com/search/?adv=1.
Event ID: 1121
Event Source: MSExchangeIS
Event Category: General
Description: Error 0x8004010f connecting to the Microsoft Exchange Server Directory Service.
Event ID: 5000
Event Source: MSExchangeIS
Event Category: General
Description: Unable to initialize the Microsoft Exchange Information Store service. Error 0x8004010f.
The following error message may be logged at the end of the Exchange 2000 Setup Progress log:
[16:34:37] CComBOIDomain::QueryInterface (K:\admin\src\udog\BO\bodomain.cxx:52) Error code 0X80004002 (16386): No interface.

CAUSE

This issue may occur if authenticated users do not have read access in the Domain container or in the Configuration container in Active Directory.

RESOLUTION

To resolve this issue, use ADSI Edit to grant authenticated users read access in the Domain container and in the Configuration container in Active Directory.

ADSI Edit is located in the Microsoft Windows 2000 Support Tools. To install the Windows 2000 Support Tools, run Setup in the Support\Tools folder on the Windows 2000 Server CD-ROM. For additional information about the Windows 2000 Support Tools, see the Sreadme.doc file in the Support\Tools folder on the Windows 2000 Server CD-ROM.

WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

To resolve this issue:
  1. Start ADSI Edit:
    1. Click Start, point to Programs, and then click Windows 2000 Support Tools.
    2. Click Tools, and then click ADSI Edit.
  2. Expand the Domain NC container, right-click the folder for the domain (DC=domain,DC=com), and then click Properties to open the folder properties.
  3. Click the Security tab, and then make sure that the Authenticated Users group has Read access selected in the Allow column. If Read is not selected, click to select Read, and then click OK.
  4. Expand the Configuration Container, right-click the folder for configuration (CN=Configuration,DC=domain,DC=com), and then click Properties to open the folder properties.
  5. Click the Security tab, and then make sure that the Authenticated Users group has Read access selected in the Allow column. If Read is not selected, click to select Read, and then click OK.
  6. Quit ADSI Edit.
  7. Allow time for the change to replicate among the domain controllers.
  8. Start the Information Store service.
Modification Type:MajorLast Reviewed:7/17/2006
Keywords:kberrmsg kbprb KB305392
©2004 Microsoft Corporation. All rights reserved.