Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Mailbox Store|
Unable to access the object manager (OM) object from the Microsoft Exchange MTA for MH_T_MTS_IDENTIFIER, MH_T_EXTERNAL_TRACE_INFO, MH_T_EXPANSION_HISTORY.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
As per Microsoft: "The object manager checks whether the action being attempted is among the granted access rights associated with the object's handle". See MSEX2KDB for additional information about this event.
David Lee Steele, Jr.
Opening Exchange System Manager and transversing to the X.400 Queues, I enumerated the queues and looked for anything suspicious. I found one item in the Queue (a Zetafax Connector Queue in this case) that did not have a from: field. I right-clicked and deleted (no NDR) the item several times with no result. I finally right-clicked and deleted (send NDR) and the item disappeared. The messages stopped appearing in the event viewer shortly thereafter. I previously was getting 2-3 of these messages every couple of minutes. See ME319653, ME306268, ME297481.
There is a correlation but not an established causal relationship between a string of these 2024 errors and messages getting stuck in the Exchange 2000 MTA queue. Running mtacheck /rd, /rl, and /rp gets the mail flowing again, but the problem recurs at least once a day.
While listed as applicable to Exchange 5.0, ME176489 may provide information on one condition when such messages occur.
|Private comment: Subscribers only. See example of private comment|
|Links: ME176489, ME319653, ME306268, ME297481, MSEX2KDB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated