We have one Exchange Admin that is getting these messages every few minutes, and another Exchange Admin receiving nothing (as far as I can tell, both of us are listed on the exact same things under Forefront notifications).
Microsoft Forefront Security transport scan had a problem processing the message, From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]; Subject: User 3 data The message has been archived and purged. ________________________________ From: McCready, Rob [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2008 10:53 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Forefront Seems like the moves started yesterday morning, and the errors started yesterday around 3PM. ________________________________ From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2008 10:46 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Forefront How concurrent was the user move with the error appearing? :-P Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael Link with me at: http://www.linkedin.com/in/theessentialexchange From: McCready, Rob [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2008 10:42 AM To: MS-Exchange Admin Issues Subject: Exchange 2007 Forefront We are suddenly receiving many messages in our eventviewer on our Exchange 2007 Hub Transport Server. "Could not retrieve next row of data from AD. Error code: 00005012. (Event ID: 8022) The only info I've found refers to Hotfix Rollup 3 for Forefront SP1 (but we aren't on SP1 yet). http://kbalertz.com/954578/Sender-notifications-Forefront-Security-Exchange-Server-Service-field-original-message-header-multiple-lines.aspx We are also receiving alerts that say...... ----- Original Message ----- From: [EMAIL PROTECTED] <[EMAIL PROTECTED]> To: Smith, Johnny Sent: Thu Sep 18 10:12:03 2008 Subject: Microsoft Forefront Server Security transport scan encountered an error Microsoft Forefront Security transport scan had a problem processing the message, From: [EMAIL PROTECTED] To: [EMAIL PROTECTED];[EMAIL PROTECTED]; Subject: RE: T&A Request For Information The message has been archived and purged. We have temporarily disabled the Kaspersky Antivirus due to another issue (which a hotfix is supposed to fix), and we've recently moved users from on OU to another in Active Directory, but those are the only two changes I'm aware of. Has anybody else seen these errors? Thanks! Rob ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
