Event 9217 source MSEXchange Tansport

I have exchange 2010 and I got error with event number 9217 source MS Exchange Transport
More than one Active Directory object is configured with the recipient address
IMCEAEX-ADCDisabledMail@mydomain. Messages to this recipient will be deferred until the configuration is corrected in Active Directory
how can fix the problem ?

Hi,
From your description, the issue is related to the legacyExchangeDN, I recommend you use the following cmdlet in Windows PowerShell to clear it and check the result.
Get-ADObject -LDAPFilter "(&(objectClass=user)(objectCategory=person)(legacyExchangeDN=ADCDisabledMail))" -Properties LegacyExchangeDN | Set-ADObject -Clear LegacyExchangeDN
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Similar Messages

Every morning receive Event Source MSExchange Common ID 4999

Every morning at 2/2/2012 2:06:02 AM
for weeks now we receive Event Source MSExchange Common ID
SBS 2011
Standard – Exchange 2010 => build 14.01.0355.002 (Update Rollup 6 for Exchange Server 2010 SP1)
Event Details:
Watson report about to be sent for process id: 12000, with parameters: E12, c-buddy-RTL-AMD64, 14.01.0355.001, BPA, M.E.Data.Directory, M.E.D.D.DSAccessTopologyProvider..ctor, S.IO.FileLoadException, 72f, 14.01.0355.001. ErrorReportingEnabled:
False
This is an Intel machine so we are not sure why there is “AMD64” in the details - This Event does not seem to cause any problem that we can detect.
Anyone tried
- Exchange Server 2010 SP2 December 4, 2011 Build 14.2.247.6 on a SBS2011 Standard yet? -
Since one of the KB articles – I found says -
Maybe -
http://support.microsoft.com/kb/2447629 (Rollup 3 but we have 6)

Hi,
It seems that the issue is related to the special characters in the database name cause an
IndexOutOfRangeException exception. This exception crashes the
MSExchangeServicesAppPool application pool.
For more detailed information, you could refer to the article below:
Title: Event ID 4999 is logged on an Exchange Server 2010 Client Access server (CAS)
URL:
http://support.microsoft.com/kb/2665115
From the KB article resolution, you need to obtain Interim Update (IU) by contacting Microsoft Customer Service and Support.
Regards,
James
James Xiong
TechNet Community Support

Event ID 8365, app log error, source MSExchangeAL

I had this error show up in my app log early this morning:
Event ID 8365, source MSExchangeAL, text "Could not read the Security Descriptor from the Exchange Server object with guid=B661C17D309B914BB1AC85C1CFF9ADD8. As a result the Proxy Address Calculation RPC interface will not be available on the local Exchange Server."
I'm not sure if I should be concerned about this or not. I only have one Exchange Server, and it has a different guid. It's possible that the above-referenced guid belongs to the old Exchange 2003 server I migrated from and subsequently decommissioned, but I can't tell because that object doesn't exist in AD anymore (at least as far as I can tell). Is there a way to search for a guid and find out what object it's attached to?

I'm getting an event ID 8365 error in the app log on my Win Server 2008 R2 Std Edition server running Exchange Server 2010 Standard Edition. The Exchange organization was migrated from Exchange 2003, and the 2003 server has since been decommissioned.
The source for this error is MSExchangeAL, and the text associated with it is "Could not read the Security Descriptor from the Exchange Server object with guid=B661C17D309B914BB1AC85C1CFF9ADD8. As a result the Proxy Address Calculation RPC interface will
not be available on the local Exchange Server." The error occurs every few days, sometimes a couple times in one day, but I haven't discerned a pattern yet. I'd love to find out what that guid refers to, but can't figure out how to look that up,
so if anyone can enlighten me about that, I think that'd help. Of course, a solution to the whole issue would be great too. Thanks.

Event ID 5 - MSExchange Workload Management

Getting this error on Exchange 2013 CU2:
The description for Event ID 5 from source MSExchange Workload Management cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the
local computer.
If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event:
MdbLatency(database_name)
8/14/2013 1:17:34 PM
00:00:15.0229848
the message resource is present but the message is not found in the string/message table
After researching the issue a bit, I found 2 similar registry settings that existed with almost the same name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\MSExchange Workload Management
and
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\MSExchange WorkloadManagement
The first key has a reference to EventLogMessages.dll while the second key has references to Microsoft.Exchange.Data.WorkloadManagement.EventLogs.dll and Microsoft.Exchange.WorkloadManagement.EventLogs.dll. After following these paths, I see that one of
the files does not exist in the location specified, nor does it exist on the server at all. The file in question is: Microsoft.Exchange.Data.WorkloadManagement.EventLogs.dll
Question is, any idea why there's 2 similar key names in the registry, why the file might be missing or how to restore it? This was originally a clean RTM install, then CU1, then the 2nd release of CU2 was installed most recently. Several things broke in
between the upgrades, all of which I was able to resolve with some research. This is one lingering issue I cannot seem to resolve. Any help would be appreciated.

I found this link with a potential fix.
http://www2.exchange-help.com/index.php/faq-exchange/43-exchange-2013/297-the-description-for-event-id-5-from-source-msexchange-workload-management-cannot-be-found
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Exchange 2013 Event ID 106 MSExchange Common

Event ID 106 is generated on Exchange 2013 ,already updated Perfcounters.ps1 according to this article.still getting
same error.
http://support.microsoft.com/kb/2870416/en-us
Log Name: Application
Source: MSExchange Common
Date: 1/13/2014 8:59:30 PM
Event ID: 106
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: DC4.chickbuns.com
Description:
Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-w3wp-msexchangeowaapppool'
already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited.
Processes running while Performance counter failed to update:
3148 MSExchangeDelivery
388 wininit
1568 SMSvcHost
8976 w3wp
2748 conhost
6292 w3wp
380 csrss
3924 MSExchangeFrontendTransport
768 svchost
1948 sftracing
1156 spoolsv
956 svchost
7204 w3wp
752 LogonUI
2128 noderunner
3900 MSExchangeSubmission
8968 w3wp
1928 ForefrontActiveDirectoryConnector
1336 taskeng
7048 w3wp
348 svchost
3692 Microsoft.Exchange.EdgeSyncSvc
4676 Microsoft.Exchange.RpcClientAccess.Service
4872 MSExchangeMailboxReplication
340 csrss
1556 UMWorkerProcess
8020 w3wp
3088 Microsoft.Exchange.AntispamUpdateSvc
1312 MSExchangeHMHost
7948 w3wp
424 winlogon
1500 rundll32
4448 MSExchangeMailboxAssistants
900 svchost
6700 scanningprocess
504 lsm
5816 umservice
4244 Microsoft.Exchange.ServiceHost
2736 MSExchangeHMWorker
496 lsass
1840 vmtoolsd
1872 noderunner
488 services
1396 inetinfo
680 svchost
1296 hostcontrollerservice
7036 w3wp
1688 noderunner
1216 svchost
6740 scanningprocess
2364 svchost
1844 svchost
856 svchost
4992 conhost
6760 w3wp
7816 w3wp
4196 Microsoft.Exchange.Pop3Service
2028 updateservice
1236 fms
2220 noderunner
4976 msexchangerepl
7544 w3wp
600 svchost
5364 MSExchangeTransportLogSearch
2464 WMSvc
4376 conhost
1416 Microsoft.Exchange.Diagnostics.Service
3580 Microsoft.Exchange.Imap4Service
6336 scanningprocess
1016 Microsoft.Exchange.Directory.TopologyService
4364 Microsoft.Exchange.Imap4
5992 Microsoft.Exchange.UM.CallRouter
6920 w3wp
2388 wlms
5144 MSExchangeThrottling
808 svchost
3760 Microsoft.Exchange.Search.Service
4744 Microsoft.Exchange.Pop3
248 smss
2964 WmiPrvSE
1584 rundll32
5840 Microsoft.Exchange.Store.Worker
4 System
4336 Microsoft.Exchange.Store.Service

Hi,
Based on my research, the issue can be resolved by removing and re-creating all Exchange performance counters:
add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
$files=get-childitem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\" *.xml |where-object {!($_.psiscontainer)}
foreach ($file in $files) {remove-perfcounters -definitionfilename $file.fullname}
foreach ($file in $files) {new-perfcounters -definitionfilename $file.fullname}
For more information, you can refer to the following thread:
http://social.technet.microsoft.com/Forums/exchange/en-US/a8e35d2a-5e09-4ec5-b5c8-43554d3b8b78/lots-of-errors-106-msexchange-common?forum=exchangesvradmin
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Double click event to source code

hi all
What im trying to do is when someone clicks one of the keywords in the tree browser file that it takes them to the source code window and to that method or variable the clicked. For exaple lets say have 2 windows, on the left side is just a list of methods and variables and ont he right hand is the window which u can see the source code. What i need is that when someone click on a method name on the left window, it will take them directly to that method name in the source file window (right window).
public void mouseClicked(MouseEvent e)
Any ideas what i need to do??
Maybe it will help if i copy and paste the code of the [b]left window.
import java.util.Observable;
import antlr.collections.AST;
import java.awt.Font;
import java.awt.event.*;
import java.awt.event.MouseEvent;
import javax.swing.*;
import javax.swing.tree.*;
import javax.swing.event.*;
import javax.swing.border.TitledBorder;
public class FileContentPanel extends ModulePanel {
    private ProgramModel model;
    private JTree contentTree;
    private APIViewer api;
    private SourceViewWindow view;
    private Formatter format;
    private FileTree tree;
    private JPopupMenu menu = new JPopupMenu();
    private JMenuItem viewmenu;
    /** Creates a new instance of FileContentWindow */
    public FileContentPanel(ProgramModel model, APIViewer a) {
        super(model, "File Contents");
        this.api = a;
        createPopupMenu();
        contentTree = new JTree() {
            public String getToolTipText(MouseEvent evt, ActionListener l) {
                if (getRowForLocation(evt.getX(), evt.getY()) == -1)
                    return null;
                TreePath curPath = getPathForLocation(evt.getX(), evt.getY());
                DefaultMutableTreeNode highlighted = (DefaultMutableTreeNode)curPath.getLastPathComponent();
                Object userOb = highlighted.getUserObject();
                String ret=highlighted.getUserObject().toString();
                if (userOb.getClass()==JavaMember.class)
                    ret=((JavaMember)userOb).getSignature();
                else if (userOb.getClass()==JavaClass.class)
                    ret=((JavaClass)userOb).getSignature();
                return ret;
        DefaultTreeCellRenderer renderer = new DefaultTreeCellRenderer();
        ImageIcon file = new ImageIcon(Prototype.class.getResource("images/source.gif"));
        renderer.setLeafIcon(file);
        contentTree.addMouseListener(new PopupTrigger());
        contentTree.setCellRenderer(renderer);
        contentTree.setToolTipText("");
        contentTree.setFont(new Font("Arial", Font.PLAIN, 11));
    private void setTree(JavaFile f) {
        ((DefaultTreeModel)contentTree.getModel()).setRoot(f.buildTree());
        getScroller().getViewport().add(contentTree);
    public void update(Observable o, Object arg) {
        setTree((JavaFile)arg);
    public boolean canViewAPI(DefaultMutableTreeNode node) {
        return (!node.isRoot() && node.getParent().toString().equals("imports"));
    private void createPopupMenu() {
        Action viewAPI = new AbstractAction("View API") {
            public void actionPerformed(ActionEvent e) {
                DefaultMutableTreeNode node = (DefaultMutableTreeNode)contentTree.getSelectionPath().getLastPathComponent();
                if (node != null)
                    api.viewAPI(node.toString());
        viewmenu = menu.add(viewAPI);
    class PopupTrigger extends MouseAdapter {
        public void mouseReleased(MouseEvent e) {
            maybeShowPopup(e);
        public void mousePressed(MouseEvent e) {
            maybeShowPopup(e);
            //tree.getTree();
           // System.out.println("U are nearly there");
         public void mouseClicked(MouseEvent e)
           System.out.println("jknxncnnxzv");
        private void maybeShowPopup(MouseEvent e) {
            if (e.isPopupTrigger() ) {
                int x = e.getX();
                int y = e.getY();
                TreePath path = contentTree.getPathForLocation(x, y);
                if (path == null)
                    return;
                contentTree.setSelectionPath(path);
                contentTree.scrollPathToVisible(path);
                DefaultMutableTreeNode node = (DefaultMutableTreeNode)path.getLastPathComponent();
                if (node != null) {
                    viewmenu.setEnabled(canViewAPI(node));
                menu.show(contentTree, x, y);
Cheers

Does JavaClass contain the list of JavaMembers? If so, and if it is supposed to reflect the current state of the file that is open on the right hand side, then it should probably have methods to get the line and column number for the start of the contained JavaMembers. If you can figure out how to keep that in sync, you should be able to query it directly and set the cursor position.

Accidentally split 2 events, now "source clip missing" in my project, HELP!

Ok, so I've been working for weeks on a project, and I accidentally split an event into 2 events. Dumb I know, but I was trying to split a single clip. Anyway, it split the event and made 2 new events. I tried to "undo" but for some reason it didn't work. Now alot of the clips say "source clip missing". I looked in the trash and found my missing original event folder, but it's empty cos all the videos are still in the event, but under the 2 new events. I tried to put the folder back into imovie, I re-merged the 2 split events and renamed it the original name (after someone on a forum suggested this) and nothing works. I am freaking out! It is crazy cos all the video is still there (at least I think it is). Does anyone have any suggestions? Thanks!!!

Thank You Sameer. It worked. Now I can close this issue.
Regards,

Event 129 Source "storahci" in Win8RTM

I'm having log entries for event id 129 from source "storahci" ("Reset to device, \Device\RaidPort0, was issued.") in Win 8 RTM Enterprise (MSDN) on a Dell Precision M4500 with SSD OCZ-AGILITY3.
These entries are in correlation with event id 153 from source "disk" ("The IO operation at logical block address ... for Disk 0 was retried.").
I already saw a thread reporting this issue at "http://answers.microsoft.com/en-us/windows/forum/windows_cp-performance/windows-8-unresponsive-with-disk-reported-at-100/d4cf6b80-635e-4359-99ec-b9d453e731ee?page=2", but that thread is marked as "closed" with
the remark "This thread applies to Windows 8 Consumer Preview. The thread is locked because the information in it might not be relevant or accurate as new versions of Windows 8 become available."
Was anybody already able to fix that issue?
Since this is the second SSD with that issue (the previous was one from Corsair), I cannot recommend running Windows 8 RTM on a laptop with an SSD installed, what makes me really sad.

The BIOS is most likely set to RAID for sata operation. That would require that the Intel RApid Storage drivers from Dell
here for the M4500 be added during a clean installation at the select a partition stage, ADD Drivers and point to the files on external storage media. Win 7 only available at this time from Intel or Dell.
The RTM may not have those in-the-box yet. Intel will provide those to MS later. Win 7 has those.
So, I would say that you could try an F8 repair mode to add drivers or you may have to reinstall again to add the drivers.
Any joy?

Event Viewer source name mistake

I recently had a Master Browser error. The source says bowser not browser - Windows Operating System; Version: 6.1.7600.16385; Event ID: 8003; Event Source: bowser

I'm curious as to whether or not you have any language packs installed? The only thing (well not the ONLY thing) I could find relates to really old servers/OS's like this KB article http://support.microsoft.com/default.aspx/kb/188001 but I haven't seen those types events in years. Here's some other comments that may shed some light on your situation since you didn't exactly tell us your network setup.
This problem occurs when network logon validation is prevented over a network switch. The network switch prevents the server from authenticating the client. The two-way communication session necessary for logon validation is prevented. The Windows NT client computer that cannot successfully communicate with the Windows NT server acting as the subnet master browser may cause a browser election, which causes this error to be registered on the PDC.
As per Microsoft: "The subnet mask of the Windows 2000 client computer is incorrect or is different from the primary domain controller. The client computer has attempted to promote itself to the master browser of the subnet and has failed because only one computer in a domain can be running as the master browser".
The subnet mask of the Windows 2000 client computer is incorrect or is different from the primary domain controller. The client computer has attempted to promote itself to the master browser of the subnet and has failed.
To Fix: Change the TCP/IP protocol configuration to the correct subnet mask
This can also be caused when routers or switches are misconfigured and propagate UDP port 137 and 138 broadcasts. In this case large numbers of event 8003 appear in the event log.
So if you can tell us more about your network settings, and nothing above works, then by having your settings we can probably come up with a solution for you.
MCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

Fire A Portal Event With Source Id

Hi All,
I have this requirement where I need to fire an event from a Web Dynpro iView and a delivered iView (MSS Team Viewer) will receive it. The problem is the receiving iView (Team Viewer) need the source id parameter which is available in EPCF raiseEvent as an optional fourth parameter but the method WDPortalEventing.fire() method does not have it. Is there a workaround for populating this parameter? I wonder why it is omitted in the Portal Eventing API.
Thanks in advance.
Erwin

Hi Julia,
Yes, you can have 2 users with same uid in 2 different org but then, you must use 2 different authentication module and then your login url must be something like : .../UI/Login?org=yourOrgName
And then, this organization must have a Auth module.
Now, for the users, it's better to propose only the good login url.
ie, we have 5 differents login url based on 5 differents org. I'd change the login provider to alow the user to change its own organisation (with a list box). I've change the file under LoginProvider directory... (JES 2005Q4, Portal 6 : /etc/opt/SUNWps/desktop/default/LoginProvider/display.template
I think, in Portal 7, you have a jsp provider. Easier ;-)
a+
Philippe

Event logging sources

Morning,
In the "Hardening and Security for LC ES Update 1 (Oct 2008) documentation, page 23 "Logging Events".
How is this performed? How do I setup LC to send events to a OS event source?
Does anyone have an example of this?
Thank you,
Carmen

hi,
From your post what i understood is, you don't have a event being triggered or captured even though you ran the event trace during your transaction.
If you are trying to initiate a work flow with respect to triggering of events and if you don't have any events you need to either of two ways.
1) Message control--> whenever your transaction you can assign the work flow for every success or failure message
2) Change pointers or change document objects:
trigger the work flow whenever there's a update in the tables CDHDR and CDPOS.
Regards
Sharath

Event triggering sources

Hi Friends,
Is there any way to check the sources of event triggering? event trace is not thr..
Regards
Dev

hi,
From your post what i understood is, you don't have a event being triggered or captured even though you ran the event trace during your transaction.
If you are trying to initiate a work flow with respect to triggering of events and if you don't have any events you need to either of two ways.
1) Message control--> whenever your transaction you can assign the work flow for every success or failure message
2) Change pointers or change document objects:
trigger the work flow whenever there's a update in the tables CDHDR and CDPOS.
Regards
Sharath

How to trace the EVENT's source which triggers the process chain

hello Friends,
I am currently involved in a new project, which does'nt have any documentation of the system. There is a process chain which is triggered by the event ( say..... "BI_START") and it gets triggered every day night,.......
But the problem I have is, I could'nt trace where this EVENT gets triggered....
Can you please advice me how to trace plz...... Thanks very much for your time.....
Thanks,

Check in SM37 or in the tables TBTCO or TBTCP with below selected fields.
JOBNAME = Background job name
SDLSTRTDT = Planned Start Date for Background Job
SDLSTRTTM = Planned start time for background Job
SDLUNAME = Initiator of job/step scheduling
PRDMINS = Duration period (in minutes) for a batch job
PRDHOURS = Duration period (in hours) for a batch job
PRDDAYS = Duration (in days) of DBA action
PRDWEEKS = Duration period (in weeks) for a batch job
PRDMONTHS = Duration period (in months) for a batch job
PERIODIC = Periodic jobs indicator ('X')
STATUS = State of Background Job, S = Released, F = Finished
AUTHCKMAN = Background client for authorization check
EVENTID = Background Processing Event
EVENTPARM = Background Event Parameters (Such as, Jobname/Jobcount)

EventID: 1006 Source: MSExchange Mailbox Replication

Hi All,
On my Exchange 2010 i see the following Events in the Application Log.
The Mailbox Replication service was unable to process mailbox move requests in a mailbox database.
Database: MDB01
Error: Couldn't find system mailbox 'SystemMailbox{e0e13cb6-bd1c-4a67-b483-3fe8db9d3631}' in Active Directory.
But when i look at the Arbitration Mailboxes it's there.
[PS] C:\Windows\system32>Get-Mailbox -Arbitration | fl Name
Name : FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
Name : SystemMailbox{A89BCF10-3F08-41C2-AC86-68E35C08D972}
Name : SystemMailbox{e0e13cb6-bd1c-4a67-b483-3fe8db9d3631}
Any ideas out there?
Regards Andres
-- MCSE 2003 MCSA 2003 Messaging MCITP: Enterpise Administrator MCTS: Windows Server 2008 MCTS: Exchange Server 2007 Configuration MCTS: Microsoft SQL Server 2005 VCP - VMWare Certified Professional

Hi Andres,
The arbitration mailboxes in your product environment are not created by a correct way. I suggest you delete all of them and recreate them.
1. Delete those AD accounts.
2. Run Setup.com /PrepareAD. The arbitration accounts will be recreated after this step.
3. Enable those mailboxes with the following commands.
-   Enable-Mailbox –Arbitration –Identity “SystemMailbox{1f05a927-…}”
-   Enable-Mailbox –Arbitration –Identity “SystemMailbox{e0dc1c29-…}”
-   Set-mailbox –Arbitration –Identity “SystemMailbox{e0dc1c29-…}” -DisplayName “Microsoft Exchange”
Then please test the issue again. Thanks,
Elvis

Event ID: 4999 - MSExchange Common - Exchange 2010 SP3

Hi all,
I have Exchange 2010 SP3 RU4 and since yesterday without reason (I didn´t patch anything, configure etc.) following error randomly appears in app eventlog:
Watson report about to be sent for process id: 6000, with parameters: E12, c-RTL-AMD64, 14.03.0151.000, AirSync, MSExchange ActiveSync, Microsoft.Exchange.Data.Storage.GlobalObjectId.IsForeignUid, UnexpectedCondition:NullReferenceException, 54b1,
14.03.0151.000.
ErrorReportingEnabled: True
I´ve tried to find some info but no luck.
Does anybody know how to fix this?
Thanks in advance, O.

Resolved..
A few days ago I hid some testing resource mailboxes (rooms) in GAL, which were used in Cisco TMSXE (Videoconferencing SW). Then, when I restarted the IIS, these errors appeared, because of Cisco TMSXE couldn´t find the room mailboxes. So I unhide
them and errors are gone..

Event 9217 source MSEXchange Tansport

Similar Messages

Maybe you are looking for