Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Private|
|Type: Failure Audit|
<User name> was validated as <user name> but was unable to log on to <server name>.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
What is the role on System Attendant service?
This event is generated when you delete a mailbox or a public folder without first removing a published Event Script from the mailbox or the public folder. See ME281683 for details.
As per Microsoft: "This event is logged when you run MBClean from a server where the user mailboxes do not reside. This event is informational only and does not result in any failures in running MBCLean. The event can be ignored". See ME188594 for more details.
From a newsgroup post: "I have seen this happen when a mailbox has been deleted and recreated under the same name, and an existing Outlook profile that used to access the original mailbox is modified to access the recreated mailbox. To clean up, simply create brand new Outlook profiles for those generating the errors, and setting the new profile as the default startup profile for Outlook".
See the link to "EventID 1023 from source MSExchangeIS" for additional information on this event.
Woodrow Wayne Collins
See ME158028, ME306308, ME173776 and ME237481.
As per Microsoft: "Event ID 11 is logged in the application event log soon after you start the Microsoft Exchange Event Service. Event ID 1023 is logged immediately after the Event Service starts. It may take approximately one minute for the Event ID 11 to appear in the application event log. In some cases, the Event 1023 and (or) 11 does not appear at all. The events are harmless and are generated when you delete a mailbox or public folder without first removing a published Event Script from the mailbox or public folder." For more details see ME259578.
|Private comment: Subscribers only. See example of private comment|
|Links: ME158028, ME173776, ME188594, ME237481, ME259578, ME281683, ME306308, EventID 1023 from source MSExchangeIS|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated