Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2024 Source: MSExchangeISMailboxStore

Unable to access the object manager (OM) object from the Microsoft Exchange MTA for MH_T_MTS_IDENTIFIER, MH_T_EXTERNAL_TRACE_INFO, MH_T_EXPANSION_HISTORY.
As per Microsoft: "The object manager checks whether the action being attempted is among the granted access rights associated with the object's handle". See MSEX2KDB for additional information about this event.
Opening Exchange System Manager and transversing to the X.400 Queues, I enumerated the queues and looked for anything suspicious. I found one item in the Queue (a Zetafax Connector Queue in this case) that did not have a from: field. I right-clicked and deleted (no NDR) the item several times with no result. I finally right-clicked and deleted (send NDR) and the item disappeared. The messages stopped appearing in the event viewer shortly thereafter. I previously was getting 2-3 of these messages every couple of minutes. See ME319653, ME306268, ME297481.
There is a correlation but not an established causal relationship between a string of these 2024 errors and messages getting stuck in the Exchange 2000 MTA queue. Running mtacheck /rd, /rl, and /rp gets the mail flowing again, but the problem recurs at least once a day.
While listed as applicable to Exchange 5.0, ME176489 may provide information on one condition when such messages occur.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.