Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
An ambiguous Mailbox Guid <id> was found on <number> mailboxes in the DS. The store cannot map this Mailbox Guid to a unique user.
|English: This information is only available to subscribers. An example of English, please!|
|Concepts to understand:|
What is a GUID?
What is the role of the Microsoft Exchange Information Store service?
- User is not allowed to send any email (NDR: This message could not be sent. Please try later or inform you network administrator. Error: [0x8004010f-00000000-00000000]).
- Mailbox Rights dialog box does not show any details.
- This event is logged in the application log.
In my case, the error message pointed to two users with the same mailbox GUID. When searching the GUID using advanced search (see ME291542), the result showed only the one user who definitely owned the mailbox. Using guidfind, a tool from MS, the query displayed another user object. Inspecting the user object via ADSIEdit the msExchMailboxGUID attribute was empty though the legacyExchangeDN was set to "ADCDisabledMail". After clearing this attribute, the mailbox rights showed up again and e-mails were being relayed again.
|Private comment: Subscribers only. See example of private comment|
|Links: ME291542, MSEX2K3DB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
|Custom search for *****: Google - Bing - Microsoft - Yahoo|
Send comments or solutions
- Notify me when updated