When Migration Manager for Exchange Agent is installed on the Exchange 2007 server running Windows 2008 or when the Migration Manager Agent is started/stopped, the following error is loged into the Application Event Log file on Exchange server:
Product: Windows Operating System
ID: 5605
Source: Microsoft-Windows-WMI
Version: 6.0
Symbolic Name: WBEM_MC_WBEM_REQUIRES_ENCRYPTION_DENIED
Message: Access to the %1 namespace was denied because the namespace is marked with RequiresEncryption but the script or application attempted to connect to this namespace with an authentication level below Pkt_Privacy. Change the authentication level to Pkt_Privacy and run the script or application again.
Error EventID 5605 is misleading. It should be an informational event only.
Microsoft support officially confirmed the event log error in question should be an informational event only and not an error. The issue is likely to be fixed in the next Windows 2008 SP or next release version. This event can in no way be harmful to the Exchange server or environment and can be safely ignored. Please see the Microsoft Case summary below:
"When a given Namespace is configured with RequiresEncryption(True) qualifier, at any remote connection to this namespace, WMI will fire error EVT 5605 on connectserver () on the server box
Basically, the event is generated for noticing Administrators there is a connection to this encrypted namespace. there are chances to get access_denied on non-PKT_PRIVACY level requests (ex. query, getobject... )
The event should be informational type only and NOT an error since the access_denied incidents only occurs on the later stages of WMI Requests, not in connectServer.
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy