The only disabled accounts in the domain (and forest) are things like : Guest krbtgt And all the System Mailboxes.
Thanks Rob ----- Original Message ---- From: Michael B. Smith <[EMAIL PROTECTED]> To: MS-Exchange Admin Issues <exchangelist@lyris.sunbelt-software.com> Sent: Wednesday, 4 June, 2008 2:01:34 PM Subject: RE: Strange pair of events twice daily I love generic errors. Not. That error is MAPI_E_CALL_FAILED. However, because of the “logon failure” – I would tend to wonder – how many disabled users do you have and do any of them have mailboxes associated with them? Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com From:ROBERT WILCOX [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2008 6:52 AM To: MS-Exchange Admin Issues Subject: Re: Strange pair of events twice daily D'oh, I meant all of the Exchange servers in one of the DOMAINS (not admin groups, as it's a single admin group). Thanks Rob ----- Original Message ---- From: ROBERT WILCOX <[EMAIL PROTECTED]> To: MS-Exchange Admin Issues <exchangelist@lyris.sunbelt-software.com> Sent: Wednesday, 4 June, 2008 11:50:05 AM Subject: Strange pair of events twice daily Hi all, We have a dozen Exchange 2003 SP 2 servers, split across two domains, all in the same Administrative Group. On all of the Exchange servers in one of the Admin groups, we get the following pair of events logged : Event Type: Error Event Source: MSExchangeIS Event Category: General Event ID: 9562 Date: 6/3/2008 Time: 12:04:08 AM User: N/A Computer: XYZABC Description: Failed to read attribute msExchUserAccountControl from Active Directory for /o=First Organization/ou=First Administrative Group/cn=Recipients/cn=XYZABC. Event Type: Error Event Source: MSExchangeIS Mailbox Store Event Category: Logons Event ID: 1022 Date: 6/3/2008 Time: 12:04:08 AM User: N/A Computer: XYZABC Description: Logon Failure on database "First Storage Group\Mailbox Store (XYZABC)" - Windows 2000 account stoop\Administrator; mailbox /o=First Organization/ou=First Administrative Group/cn=Recipients/cn=XYZABC. Error: -2147467259 They're logged at 4 minutes past minute, then 40 minutes past. They're logged again a 4 minutes past mid-day then 40 minutes past. Then again at midnight. I checked to see if the computer account XYZABC, had someone got a mail address, but it doesn't, and I don't see it listed in the list of mailboxes on the store under the server object in ESM. Saw a few pointers towards the RUS needing to be rebuilt - done that, and the same error's are still logged. Would I need to to the Enterprise RUS, and the domain RUS for the other domain as well? Thanks Rob ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
