Environment
NetIQ Security Manager 6.5.4 Log Archive Server (LAS)
Situation
Partitions are not being created in the log archive volume
The Log archive server's application log is getting event id 2177
There is no build-up or passing through of data in either the Central computer or the LAS's MSMQ's.
Resolution
To resolve this issue the computer accounts (Central computers and Log archive servers) must be added to the Windows Authorization Access Group.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In Active Directory Users and Computers, click Builtin, and then double-click Windows Authorization Access Group.
3. Click the Members tab, and then add the Central computers and Log Archive Server computers.
2. In Active Directory Users and Computers, click Builtin, and then double-click Windows Authorization Access Group.
3. Click the Members tab, and then add the Central computers and Log Archive Server computers.
Afterwards it may be necessary to restart the messaging services on both the Central computers and Log Archive Servers.
Cause
This event usually occurs because the MSMQ Service does not have access to the group memberships of the sending user most likely caused by a GPO.