More info on this.  It appears that I had a RUS Policy go awry.  I had
created a custom policy to create a "[EMAIL PROTECTED]"
and "[EMAIL PROTECTED]" using %g_%s.  The policy
worked like a charm if an object had a firstname and lastname, but
public folders don't have those.  It appears that the RUS was trying to
create those proxy addresses during each cycle thus creating 100's of
bogus smtp proxy addresses.  MS has a KB indicating that there is a
hotfix available through PSS, but it doesn't seem to perform the cleanup
http://support.microsoft.com/default.aspx?scid=kb;en-us;834349.

I now need to clean those up, but with hundreds of public folders to
process and 100's of entries per, it is not going to be easy to do
through ESM or ADSIEdit.  Will ldfe allow me to work on the proxy
addresses of public folders?  Any other suggestions to perform the
cleanup?  I have disabled those proxy addresses in the RUS policy until
I can work out how to enable it without effecting public folders again
or until I get the hotfix. 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
ExchangeDiscussions
Posted At: Wednesday, August 31, 2005 4:30 PM
Posted To: ExchDiscuss
Conversation: Odd PF/AD Errors
Subject: Odd PF/AD Errors


I recently followed the white paper for removing the first Exchange 2K
server from a site (still mixed mode 5.5/2k3).  AD is native Windows
2003 mode, and the Organization is still migrating from Exchange 5.5.

Since removing our Exchange 2K server we have noticed several Directory
Service errors (1 each for our Public Folders and a couple of System
Folders).  I'm pasting one of the errors below:


***Start paste***
Event Type:     Error
Event Source:   NTDS SDPROP
Event Category: Internal Processing 
Event ID:       2008
Date:           8/31/2005
Time:           4:02:30 PM
User:           NT AUTHORITY\ANONYMOUS LOGON
Computer:       HCPHDC1
Description:
Internal error: The security descriptor propagation task encountered an
error while processing the following object. The propagation of security
descriptors may not be possible until the problem is corrected. 
 
Object:
CN=EPI Contacts,CN=Microsoft Exchange System
Objects,DC=hcphes,DC=hc,DC=hctx,DC=net 
 
Additional Data
Error value:
-1112 []
Internal ID:
2080490

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
***End paste***


I googled it and only found a couple of confirmations of entries no
details.  Just curious if anyone has run across this before?  I have
used pfdavadmin and repaired all of the folders that I have permissions
to (which are most), but that seems to have had no effect.  The text of
the error is the same for all entries except for the object, which
cycles through our public folders.  This occurs every 30 minutes.

The only common thread is that the "Email Addresses" tab of each
affected public folder has an unusual number of smtp entries starting
like [EMAIL PROTECTED] they appear to be hex entries and presumably
were created by a RUS somewhere.  That may be what is causing the above
error, but if so I'm not sure what put the bogus smtp entries there in
the first place.

Any suggestions?  AD is Windows 2K3 with SP1 native, Exchange is 2003
with SP1 and all hotfixes in mixed mode.

Bob
 
________________________________

Bob Reasoner
Harris County Public Health & Environmental Services

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to