Multiple MSExchange RBAC events every second (event ids 264, 268, 270)

Hi,
Every second our Exchange 2013 server is writing multiple MSExchange RBAC events to the Application Event Logs, event ID 264, 268 and 270. It has been doing this all day.
The contents of the events are:
264 - (Process w3wp.exe, PID 15836) "User: [email protected] Org: got the VanriantConfigurationSnapshot"
268 - (Process w3wp.exe, PID 15836) "Cmdlet: New-TransportRule, parameters (EncryptMessage,DecryptMessage) are disabled."
270 - (Process w3wp.exe, PID 15836) "Cmdlet: Set-TransportRule, parameters () are enabled."
Can anybody suggest why it is writing so many events in such a short space of time?

Hi,
Please check whether all the logs refer to the same user
[email protected]
If so, I suggest we use process monitor to see what did the user do:
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Similar Messages

2601, 2604, and 2501 MSExchange ADAccess Event IDs when a Microsoft Exchange server restarts

I traced the problem to my Failover Cluster Manager. The cluster was Offline and the IP for the DAG was not available.
Under Cluster Core Resources, the cluster was shown to Offline.
Right-click and select Bring this resource Online.
WC

Sorry, what's the question here? There could be multiple connectivity reasons behind and it seems in your case it was cluster resource...
ransient DNS failures
Transient issues with Domain Controllers
Transient network connectivity issues
Network switches that have the PortFast functionality disabled on the ports to which the Exchange servers connect
Reference : http://support.microsoft.com/kb/2025528
Blog |
Get Your Exchange Powershell Tip of the Day from here

Updating JTable every second, want to ignore these events in my listener

I have a JTable that I update every second using
table.getModel().setValueAt(data, row, col);I'm also reacting to when the user clicks on a row in a the table, using a ListSelectionListener:
public class MyTableListener implements ListSelectionListener {
          public void valueChanged(ListSelectionEvent e) {
               if (e.getValueIsAdjusting()) return;
               //do stuff
}And of course I've done this:
table.getSelectionModel.addListSelectionListener(new MyTableListener());Problem is, every time I update the table data it generates an event handled by valueChanged() above. I need to prevent this.
Do I need a customized table model for this?
Thanks!

Found the problem: I forgot I was using JXTable, not JTable. Here's my example:
import javax.swing.*;
import javax.swing.event.*;
import javax.swing.table.*;
import java.awt.*;
import org.jdesktop.swingx.*;
public class Test {
     JXTable table = null;//change this to JTable to fix
     public class MyTableListener implements ListSelectionListener {
          public void valueChanged(ListSelectionEvent e) {
               System.out.println("event="+e.toString());
     public Test()
          JFrame frame = new JFrame();
          String columns[] = {"one", "two"};
          Object data[][] = {{0, 0}, {0, 0}, {0, 0}};
          table = new JXTable(data, columns);//change this to JTable to fix
          table.getSelectionModel().addListSelectionListener(new MyTableListener());
          frame.add(new JScrollPane(table, JScrollPane.VERTICAL_SCROLLBAR_AS_NEEDED, JScrollPane.HORIZONTAL_SCROLLBAR_AS_NEEDED),
                      BorderLayout.CENTER);
          startThread();
          frame.setVisible(true);
     public static void main (String args[]) {
          Test test = new Test();
     public void startThread()
          class RefreshThread extends Thread {
               public void run() { try {
                         while(true) { SwingUtilities.invokeLater(new Runnable() {public void run() {
                                   updateTable();
                              sleep(1*1000);
                    } catch (Exception e) {e.printStackTrace();}
          RefreshThread rt = new RefreshThread();
          rt.start();
     public void updateTable()
          TableModel model = table.getModel();
          try {
               for(int row = 0; row < model.getRowCount(); row++)
                    model.setValueAt(System.currentTimeMillis(), row, 0);
                    model.setValueAt(System.currentTimeMillis(), row, 1);
          } catch (Exception e) {
               e.printStackTrace();
}When I change it to a JTable, valueChanged() is not called every time I programmatically update the table.
If it's a JXTable, valueChanged() is called with every update. Annoying!
To compile/run the JXTable version you'll need something like
java -cp swingx-1.0.jar:. TestAs for the events themselves, I added print statements with e.toString() and the events are not distinguishable from user interaction. I wonder if this is a JXTable bug or feature.
Thanks!

Event IDs 508,509 and 510 (Health Service ESE Store) on SCOM agents

Hi Team,
Many of my SCOM agents are getting the Event IDs 508,509 and 510 on them.
HealthService (2944) Health Service Store: A request to write to the file "C:\Program Files\System Center Operations Manager\Agent\Health Service State\Health Service Store\edb.log" at offset 1485312 (0x000000000016aa00) for 512 (0x00000200)
bytes succeeded, but took an abnormally long time (60 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.
Because of these events I keep getting "Health Service Heartbeat Failure" Alerts in SCOM whenever these events occur on the agents. After a couple of minutes these alerts get auto resolved and closed.
Has anyone faced a similar issue and let me know what should be done here to solve the issue.
Thanks,
S K Agrawal

I am still not able to resolve the issue. But I came to know that the servers that had this issue were having some issue with the blade servers they all were hosted on and probably this is the issue they got these Event IDs.
I am closing this as a faulty hardware issue on the servers.
Thanks, S K Agrawal

When I enter an event in iCal, soon thereafter multiple other "New Event" notices (one to four) appear for the same day. If I delete these unwanted "New Event" notices, they later reappear -- sometimes multiplying like rabbits. Any suggestions?

When I enter an event in iCal, soon thereafter multiple other "New Event" notices (one to four) appear for the same day. If I delete these unwanted "New Event" notices, they later reappear -- sometimes multiplying like rabbits. Any suggestions?

Well, using iMovie to rearrange clips in a mini DV video edited by another program is extremely time consuming. I found a workaround. It still takes time, but it's much faster than rearranging the clips using iMovie.
The workaround is as follows. Bring up Finder and go to the directory where your event's clips are stored (typically ~/Movies/iMovie Events/<name of event>). It helps to setup Finder to be in Cover Flow mode, so you can see the beginning of each clip. Then, sort the files in ascending order by the 'Date Modified' field. This makes Finder sort the files in the same order that they were imported from the mini DV tape. Clips with timecodes have the naming convention "clip-<year>-<month>-<day> hour;minute;second.dv". Clips without timecodes use another naming convention. With the files sorted by "Date Modified" in Finder, rename clips as needed so that the date/time in their file names are in ascending order. Note: when you rename a file, you need to restart iMovie. I suggest not running iMovie while renaming files.
I believe the file date/timestamp is only accurate to the second. Occasionally, there may be a couple of clips that have the same date/timestamp. This may cause the ordering to not be correct. The best way to find these is through iMovie. To modify a file's date/time, right click on the clip in the event in iMovie, and then select "Adjust Clip Date and Time...".
So, this workaround is a lot easier and faster than trying to rearrange things from scratch in iMovie. But it's still time consuming. Creating a project out of an already edited video should take less than 5 minutes (not counting import time), but that's not the case.
I submitted an enhancement request to Apple asking if they can add an option to sort an event's clips in the order that they were imported by iMovie. Those who have the same issue as me, I suggest you submit an enhancement request as well.
Anyone have any other suggestions?
Thanks.

Exchange 2007 OWA Error after installing Service Pack 3 (MSExchange OWA event 65)

Hi everyone, I have multiple servers in Exchange 2007 SP1, Windows Server 2003 SP2 64bit.
I installed SP3 and RU15 a CAS / HUB server and now I access OWA, showing the below error:
Outlook Web Access did not initialize. There has been an event for the system administrator can resolve the problem. Contact the support of the organization.
Object reference not set to an instance of an object.
Request
URL: https: // mailserver01: 443 / owa / auth / error.aspx url = https: // mailserver01 / owa / & reason = 0
Exception
Exception type: Microsoft.Exchange.Clients.Owa.Core.OwaInvalidConfigurationException
Exception message: Object reference not set to an instance of an object.
Call stack
in Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager () in Microsoft.Exchange.Clients.Owa.Core.Globals.InitializeApplication () in Microsoft.Exchange.Clients.Owa.Core.Global.ExecuteApplicationStart (Object sender,
EventArgs e)
Inner Exception
Exception type: System.NullReferenceException
Exception message: Object reference not set to an instance of an object.
Call stack
in Microsoft.Exchange.Clients.Owa.Core.Configuration.CheckPublicFolders (ADSystemConfigurationSession session, ADObjectID [] pfdbIds, Boolean & allLegacy, Boolean & allLater) in Microsoft.Exchange.Clients.Owa.Core.Configuration..ctor (ADSystemConfigurationSession
session, String virtualDirectory , String WebSiteName, ADObjectID distinguishedName, Boolean isPhoneticSupportEnabled) in Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.LoadConfiguration () in Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager
In server events next event is logged
Event Type: Error
Event Source: MSExchange OWA
Event Category: ADNotifications
Event ID:. 65
Date: 12/27/2014
Time: 7:20:54
User: Not available
Team: mailserver01
Description:
There was an error loading the configuration parameters of Outlook Web Access. Virtual directory "owa". Website: "Default Web Site".
Error message:
"Object reference not set to an instance of an object."
HOW CAN I SOLVE THIS?
thank you very much
Microsoft Certified IT Professional Server Administrator

Hello
everyone,
thank you
for
answering,
finally
opened
with
Microsoft
support
case
and
showed
me
that
delete
servers
from
ADSEDIT.
I deleted
the
servers
that
should
not
be
and
immediately
everything
started
to
work
properly
Many
thanks to
all
for
the
help
Microsoft Certified IT Professional Server Administrator

App-V 5 sp2, Citrix user profile manager and Event IDs 19104

Hi,
the environment:
Full Infrastructure, Appv 5 sp2 Client on server 2008r2, xenapp 6.5 and Citrix user profile manager.
We get the event error 19104 on published packages. But not on all users. %APPDATA%\Microsoft\AppV\Client\VFS and %LOCALAPPDATA%\Microsoft\AppV\Client\VFS are excluded per
http://blogs.technet.com/b/appv/archive/2013/10/01/support-tip-event-ids-19104-and-19105-are-logged-when-publishing-and-unpublishing-app-v-5-0-packages.aspx from my test GPO:
List of directories to exclude:
AppData\Local\Microsoft\AppV
AppData\Roaming\Microsoft\AppV\Client
Appdata\local
appdata\locallow
Still some users get app-v Applications, but some that are copies of the ones working does not get the Applications. I have tried to delete the profile. but still no closer to a solution. Anyone got this working?

Thanks Nicke, I should have tried harder to get you to come and work with me in Oslo earlier this year ;)
That thread does point on the Profile managment, and redirection of %appdata% and %localappdata% . Those to folders are not redirected. But when i run Procmon, i can see that a working user creates the c:\users\<username>\appdata\local\temp but non
working does not even try.Non working users also does not query the registry as much as working. Ofcourse this all work in my lab so the settings should be sound. but i cannot find the smoking environment variable or setting that causes it.

Organizing multiple all day events in one day

I'm trying to figure out if I can use iCal to act as my doggy daycare biz calendar.
I tried adding each dog's appointment as an all day event, creating multiple all day events per day, however I can't figure out if there is a way to organize the order of these events. They seem to appear in the order I add them in and I can't change that. Especially when I make some of the entries repeat on a daily basis the order just gets more and more messed up. I've tried doing this with only 5 clients as a test and things are looking horrid so far. I would need to be able to enter about 20 clients, and under multiple calendars.
Would be nice to be able to have this on my computer and on my iphone by using the iCal as opposed to maintaining my current pen and paper system. Any suggestions?

You can't change the order of the event, they do go in based on the order they are entered.

Multiple all-day events and one event disappears.

I have multiple all-day events (in different calendars) and now sometimes (not always) one event won't show in iCal. It's still there cause it's now "....." instead of the name of the event.
The old multiple all-day events show perfect but when I try to add another multiple all-day event now, it will only show one all-day event. It will show as maybe timed event as I wish but only one all-day event.
I don't get why this has happened cause I have not changed anything from before except for maybe timezone.
Any ideas?
Thank you

It seems that iCal only displays 5 all-day events, even if you have plenty of room in the calendar window. Change them to timed events and you can see more. Very annoying. I'd like to find a way to change that.

Errors for excel - excel service unavailable. Event Viewer has error event ids - 5239 and 5231.

Errors for excel - excel service unavailable. Event Viewer has error event ids - 5239 and 5231.
We restart the excel service app and it solves. Looking for permanent solution.
Regards,
Kunal

To resolved the issue do a simple restart.
Restart the server
Before restarting, verify that this problem occurs often. It may be an intermittent problem that is automatically corrected and does not require you to restart the server.
If the problem occurs often, restart the server running Excel Services Application.
If the problem continues to occur often, and restarting the server did not correct the problem, confirm that the hardware of the server is functioning correctly, or reinstall Excel Services Application and re-add the server to the server farm.
Here's the article with the explanation: Error communicating with Excel Services
Application - Events 5231 5239 5240
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

Multiple "generate user event" in event loop

Hello.
1.) I am wondering if you can user a "generate user event" into an event loop to create a quasi-state machine.
For example create an event loop with the events "event a", "event b," "event c," and so on. The in "event a" put in a function to generate a user event to call "event b". Then "event b" will call "event c" and so on.
2.) If this is possible, then can u put multiple generate user events into a single event loop and have it queue the generate user events up. For example have the "event 1" case use the "generate user event" 3 times (generating "event 7" "event 8" and "event 9.") to call the next three future event cases in that order?
Thanks
Charlie C.

Of course it is possible, easiest with simply writing signaling properties. (See attached examples, LabVIEW 7.1).
You have to be very careful that you don't create trigger loops, e.g. event A triggers Event B, which triggers Event A ... ad infinitum! :0
Example "Multievents": event 1 triggers event 2, which triggers event 3.
Example Multievents2": event 1 triggers events 2-3-2-stop in sequence.
Message Edited by altenbach on 09-28-2005 01:26 PM
LabVIEW Champion . Do more with less code and in less time .
Attachments:
MultiEvents.vi ‏57 KB
MultiEvents2.vi ‏72 KB

Is there a list of Event IDs for SQL 2008 auditing events?

As a SQL Server newbie, I am having trouble finding Event IDs for SQL that can be monitored in Change Auditor.

Did you click the event class on the description column
EventClass
int
Type of event = 107.
--Prashanth

Event IDs - what do they mean?

Hi,
From time to time, my Portal Instance stops working and the Event Viewer reports errors with Oracle.iasdb (the Infrastructure database?).
Actually, I get "Information" messages with Event IDs 5 and 34, then "Error" messages with Event ID 31. A typical error message says:
The description for Event ID ( 31 ) in Source ( Oracle.iasdb ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
I haven't been able to work out how to get the full message. But surely someone out there can just tell me what the Event IDs 5, 34 and 31 mean. Can you...?
Thanks

So nobody can help at all...?

Event ids and solution

Hi,
Is there any link/article where we cna find list of critical event ids with respect to Server role?
We wanted to create a repository/KBase for all critical events and its solution.
Pls suggest if any such refernece for Windows 2012.
Regards:Mahesh

this one may be helpful...
http://www.eventid.net/
Best,
Howtodo

Exchange 2013 OWA,Async,And OA error MsExchange BackEndRehydration event id 3002

Hi team,
I had issue in My Exchange system.
I had two Exchange 2013 muli role with CAS and MBX
Server A had no problem connection when client access OWA directly (https://servernamefqdn/owa)
but, theres issue when I pointing to server B OWA (https://serverBfqdn/owa). its same when outlook connect (using OA ),and Aysnc connection.
when I failed to connect OWA, theres event id 3002 MsExchange BackEndRehydration event id 3002.
the error show at Server A ( server at a good condition )
heres the error
Thanks

Hello Team,
I have a similar issue with Event ID 3002 filling up the App log on both Mailbox servers. Here is a snippet of the error. Any help is greatly appreciated. Thank you.
"Protocol /EWS failed to process request from identity DOMAIN\CASServer. Exception: Microsoft.Exchange.Security.OAuth.InvalidOAuthTokenException: The user specified by the user-context in the token is ambiguous.
   at Microsoft.Exchange.Security.OAuth.OAuthActAsUser.InternalCreateFromAttributes(OrganizationId organizationId, Boolean calledAtFrontEnd, Dictionary`2 rawAttributes, Dictionary`2 verifiedAttributes)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.OAuthAuthenticator.ExtractActAsUser(OrganizationId organizationId, CommonAccessToken token)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.OAuthAuthenticator.InternalRehydrate(CommonAccessToken token, Boolean wantAuthIdentifier, String& authIdentifier, IPrincipal& principal)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.Rehydrate(CommonAccessToken token, BackendAuthenticator& authenticator, Boolean wantAuthIdentifier, String& authIdentifier, IPrincipal& principal, IAccountValidationContext&
accountValidationContext)
   at Microsoft.Exchange.Security.Authentication.BackendRehydrationModule.ProcessRequest(HttpContext httpContext)
   at Microsoft.Exchange.Security.Authentication.BackendRehydrationModule.OnAuthenticateRequest(Object source, EventArgs args).

Multiple MSExchange RBAC events every second (event ids 264, 268, 270)

Similar Messages

Maybe you are looking for