Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9331 Source: MSExchangeSA

OALGen encountered error <error code> (internal ID <ID>) accessing the public folder store while generating the offline address list for address list '/'.
- Error code: 80070005 - I had event 9331 and 9335, and after numerous searches I found no information on this specific error code. I had done everything said to do as far as checking that the OAB was listed and everything was set in the replication boxes, etc. I tried to rebuild but I could not. When I looked up the error code separately, I found out that it was related to access denied errors. MS Exchange System Attendant needs to run as the Local SYSTEM. I right clicked on the Mailbox store and Public Folder store, went to properties and under Security I added SYSTEM with full control. I was then able to rebuild and everything works fine now.
This issue may occur if an error occurs when Exchange Server 2003 generates changes to the .oab file. If this error occurs, Outlook may not download the Offline Address Book. See ME922255 for details on fixing this issue.

This issue occurs if the OAB system folders are not replicating to any Exchange server. The OAB system folders must replicate to at least one Exchange server. See ME922251 to solve this problem.

See MSEX2K3DB for additional information about this event.
In the "Configuring Offline Address Books" article, you can learn how Exchange generates offline address books and how to configure servers to provide support for them.
I too had suffered 9335 and 9331 problems. I did all the rebuilding of the offline address books, and the problem persisted. The problem was ultimately caused by the Offline address list not being specified, or having been lost from the mailbox store.
Open Exchange System Manager -> Administrative Groups -> First Administrative Group -> Servers -> <your server> -> First Storage Group -> Mailbox Store (<your server>) -> Mailboxes, and right click to bring up the properties. There is the default Offline address list that is used for the mailbox stores. Browse and wire it up to the Offline Address List that you want.
The chances are I buggered my system up by deleting the Offline Address List and then tried to re-create it, but off course, until it is wired to the Mailboxes then it is not going to work in the Outlook client.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.