Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Mailbox Store|
Failed to create the mailbox of /o=<organization name>/ou=<ou name>/cn=Recipients/cn=<name> with error <error code>.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
Error code: 0x50c - This error code means "EcMailboxInTransit" meaning that a logon was attempted while the mailbox was being moved. Some suggestions on how to troubleshoot this:
- You can disable the account mailbox and the re-enable it on a different store.
- Delete and recreate the account, then enable the mailbox on the same store (but the new account will not match the entry in the tombstone table).
Error code: 0x4e3 - This problem occurs if the Microsoft Exchange Information Store service background cleanup process does not run. See ME895265 for a hotfix applicable to Microsoft Exchange Server 2003.
Error code: 0x4e3 - As per Microsoft: "An attempt to create a mailbox failed. Insufficient permissions, a Jet error, or a memory error may have caused the problem". See MSEX2K3DB and ME891789 for information on this event.
I found that this error occured if the user was trying to access their mailbox while it was being moved from one server to another in another site. It was trying to access the mailbox form to old server the entire time. As soon as the move was finished, the error was gone.
I resolved this issue by carrying out the following steps:
- From AD account/Exchange Advanced/Mailbox Rights removed "SELF" acount. Clicked OK to exit back to AD account property dialog.
- Opened up Mailbox Rights, added "SELF" with Read Permissions, Full mailbox access and Associated external account.
|Private comment: Subscribers only. See example of private comment|
|Links: ME891789, ME895265, MSEX2K3DB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated