Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9533 Source: MSExchangeISMailboxStore

Level
Description
The user account for <user name> does not exist in the directory or is not enabled for Exchange mail. This mailbox will be removed from mailbox store 'First Storage Group/Mailbox Store (NEMESIS)' in 27 days.
Comments
 
This can happen when you move mailboxes from one mailbox store to another. The process that Exchange goes through is to copy the existing mailbox over and only when the move is complete does it mark it as the user's mailbox. In our case, I was moving several at a time and the moves all crashed due to a space issue on the old drive. Exchange saw the half moved mailboxes on the new drive and marked them for removal due to no actual associated user. You can verify this by comparing the mailbox store listed in the event to the mailbox store listed for the user in the Exchange Management console.
If the Exchange Management Console in Exchange 2007 crashes when you redraw a mailbox in the Recipient Configuration node, see ME940757 to solve this problem.
This event is logged after you run the Mailbox Cleanup Agent. See ME303311 for more details.
We encountered this message when a user has been deleted from Active Directory without deleting the afferent Exchange 2000 mailbox.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...