Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9536 Source: MSExchangeIS

Source
Level
Description
An ambiguous Mailbox Guid <id> was found on <number> mailboxes in the DS. The store cannot map this Mailbox Guid to a unique user.
Comments
 
Symptoms:
- User is not allowed to send any email (NDR: This message could not be sent. Please try later or inform you network administrator. Error: [0x8004010f-00000000-00000000]).
- Mailbox Rights dialog box does not show any details.
- This event is logged in the application log.

In my case, the error message pointed to two users with the same mailbox GUID. When searching the GUID using advanced search (see ME291542), the result showed only the one user who definitely owned the mailbox. Using guidfind, a tool from MS, the query displayed another user object. Inspecting the user object via ADSIEdit the msExchMailboxGUID attribute was empty though the legacyExchangeDN was set to "ADCDisabledMail". After clearing this attribute, the mailbox rights showed up again and e-mails were being relayed again.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...