I am getting the following error on my Exchange 2010 sp2 server. Event ID 6006 SACL Watcher servicelet found that the SeSecurityPrivilege privilege is removed from account S-1-5-21-1844404272-1730432442-2099212325-5411 The suggestion is the add the Domain\Exchange Servers group Manage Auditing and security log user right on the default domain controllers policy. It is already there Any other thoughts to resolve the error The error just appeared last week the server has been running Exchange SP2 for two months with no issues.

Hi, I got that error on two Exchange 2010 SP2 Servers after two DomainControllers had been decomissioned. A restart of the service MSExchangeADTopology got rid of that annoying error.Martina Miskovic