Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9169 Source: MSExchangeAdmin

Failed to copy basic mailbox information.
Error: <error message>.
"Error: A duplicate mailbox was found due to problems during a Move Mailbox procedure. The duplicate mailbox has been deleted. Try again later." - I queued up a lot of mailboxes to move from one store to another in Exchange 2003, and had to cancel the operation before it was finished. The cancel was taking too long, so I killed it. This caused Exchange to fail to clean up some half-moved mailboxes, so when I tried to move them again later, I got this error. The errant mailboxes show up in the target store as disconnected.

As described, the new move procedure finishes the clean-up that should have happened when canceling the previous move. Run cleanup agent on the target store to purge the errant mailboxes after this error, and rerun the move.
This event occurs when you try to move a mailbox because there is latency in the Recipient Update Service, or in Active Directory replication. See ME274119 to solve this problem.

As per Microsoft: "The mailbox could be corrupted. The MSExchUserAccountControl object might not be present on the user object in Active Directory. The user object might not have an X.400 address. The size of the mailbox might be larger than the Exchange store limit that has been set". See MSEX2K3DB for additional information about this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.