Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Mailbox Store|
The user account for <user name> does not exist in the directory or is not enabled for Exchange mail. This mailbox will be removed from mailbox store 'First Storage Group/Mailbox Store (NEMESIS)' in 27 days.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
This can happen when you move mailboxes from one mailbox store to another. The process that Exchange goes through is to copy the existing mailbox over and only when the move is complete does it mark it as the user's mailbox. In our case, I was moving several at a time and the moves all crashed due to a space issue on the old drive. Exchange saw the half moved mailboxes on the new drive and marked them for removal due to no actual associated user. You can verify this by comparing the mailbox store listed in the event to the mailbox store listed for the user in the Exchange Management console.
If the Exchange Management Console in Exchange 2007 crashes when you redraw a mailbox in the Recipient Configuration node, see ME940757 to solve this problem.
This event is logged after you run the Mailbox Cleanup Agent. See ME303311 for more details.
We encountered this message when a user has been deleted from Active Directory without deleting the afferent Exchange 2000 mailbox.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated