|
|
|
date: Wed, 4 Jan 2006 10:07:59 +0100,
group: microsoft.public.exchange2000.active.directory.integration
back
Errors 2070 and 2102 on Exchange server 2000
Hi all,
since a month the Exchange server (Exchange 2000, named Server2) is
giving me frequent errors like:
Type gebeurtenis: Informatie
Bron van gebeurtenis: MSExchangeDSAccess
Categorie van gebeurtenis: Topology
Gebeurtenis-ID: 2070
Datum: 4/01/2006
Tijd: 9:04:32
Gebruiker: n.v.t.
Computer: SERVER2
Beschrijving:
Process STORE.EXE (PID=4340). DSAccess lost contact with domain
controller server1.hnt.be. Error was 80040932 (). DSAccess will
attempt to reconnect with this domain controller when it is reachable.
followed by errors like:
Type gebeurtenis: Fout
Bron van gebeurtenis: MSExchangeDSAccess
Categorie van gebeurtenis: Topology
Gebeurtenis-ID: 2102
Datum: 4/01/2006
Tijd: 9:04:32
Gebruiker: n.v.t.
Computer: SERVER2
Beschrijving:
Process STORE.EXE (PID=4340). All Domain Controller Servers in use are
not responding:
server1.hnt.be
server3.hnt.be
followed by:
Type gebeurtenis: Waarschuwing
Bron van gebeurtenis: MSExchangeIS
Categorie van gebeurtenis: General
Gebeurtenis-ID: 9554
Datum: 4/01/2006
Tijd: 9:04:33
Gebruiker: n.v.t.
Computer: SERVER2
Beschrijving:
Unable to update Mailbox SD in the DS. Mailbox Guid:
1f50f21e-ddd9-421a-a13e-319776a7fb41. Error Code 0x80040102
--> I've checked this guid and it corresponds to our "Info" mailbox.
The two domain controllers (server1 running a Dutch Windows 2000 and
server3 running an English Windows 2003) are at that precise moment
alive and kicking!
But when checking their audit logs, they give me at those precise
moments these errors:
On server1, these are 565 Audit Failures:
Type gebeurtenis: Controle op mislukte pogingen
Bron van gebeurtenis: Security
Categorie van gebeurtenis: Toegang tot Active Directory
Gebeurtenis-ID: 565
Datum: 4/01/2006
Tijd: 9:04:32
Gebruiker: HEADOFFICE\SERVER2$
Computer: SERVER1
Beschrijving:
Object is geopend:
Objectserver: DS
Objecttype: user
Objectnaam: CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
Nieuwe ingang-ID: -
Bewerking-ID: {0,25974632}
Proces-ID: 324
Primaire gebruikersnaam: SERVER1$
Primair domein: HEADOFFICE
Primaire aanmeldings-ID: (0x0,0x3E7)
Clientgebruikersnaam: SERVER2$
Clientdomein: HEADOFFICE
Client-aanmeldings-ID: (0x0,0x18C575F)
Toegangspogingen Eigenschap schrijven
Machtigingen -
Eigenschappen:
Verwijderen
READ_CONTROL
WRITE_OWNER
Eigenschap schrijven
Public Information
SYNCHRONIZE
Self schrijven
Eigenschap lezen
Eigenschap schrijven
msExchMailboxSecurityDescriptor
On server3, these are 566 Audit Failures:
Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 566
Date: 4/01/2006
Time: 9:04:32
User: HEADOFFICE\SERVER2$
Computer: SERVER3
Description:
Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: user
Object Name: CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
Handle ID: -
Primary User Name: SERVER3$
Primary Domain: HEADOFFICE
Primary Logon ID: (0x0,0x3E7)
Client User Name: SERVER2$
Client Domain: HEADOFFICE
Client Logon ID: (0x0,0x1F73F4B)
Accesses: Write Property
Properties:
---
Public Information
msExchMailboxSecurityDescriptor
user
Additional Info:
Additional Info2:
Access Mask: 0x20
So, despite the errors 2070 and 2102 that the Exchange server is giving
and that seem to indicate a loss of connectivity with the DC's, I
believe the errors are related to access rights to this mailbox object
CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
However, after a few hours spent with ADSI edit and playing with
permissions to that object, I still haven't resolved the problems. But
I'm not an expert. So could anyone more experienced than me point me in
the right direction?
NB: the mail server is working fine, even the Info mailbox is working
fine... but those errors are bothering me.
Thank you very much.
--
Paul
date: Wed, 4 Jan 2006 10:07:59 +0100
author: Paul D B
Re: Errors 2070 and 2102 on Exchange server 2000
The following article provides a solution based on the symptoms you describe
http://support.microsoft.com/kb/314294
If this does not solve your problem look into verifying if you have properly
configured your client access licenses in your domain. Windows server will
deny connections if more sessions are opened than you have licenses for.
Exchange servers like users can be denied access.
--
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Paul D B" wrote in message
news:43bb906f$0$10952$ba620e4c@news.skynet.be...
> Hi all,
>
> since a month the Exchange server (Exchange 2000, named Server2) is giving
> me frequent errors like:
>
> Type gebeurtenis: Informatie
> Bron van gebeurtenis: MSExchangeDSAccess
> Categorie van gebeurtenis: Topology
> Gebeurtenis-ID: 2070
> Datum: 4/01/2006
> Tijd: 9:04:32
> Gebruiker: n.v.t.
> Computer: SERVER2
> Beschrijving:
> Process STORE.EXE (PID=4340). DSAccess lost contact with domain
> controller server1.hnt.be. Error was 80040932 (). DSAccess will attempt
> to reconnect with this domain controller when it is reachable.
>
>
> followed by errors like:
>
> Type gebeurtenis: Fout
> Bron van gebeurtenis: MSExchangeDSAccess
> Categorie van gebeurtenis: Topology
> Gebeurtenis-ID: 2102
> Datum: 4/01/2006
> Tijd: 9:04:32
> Gebruiker: n.v.t.
> Computer: SERVER2
> Beschrijving:
> Process STORE.EXE (PID=4340). All Domain Controller Servers in use are not
> responding:
> server1.hnt.be
> server3.hnt.be
>
> followed by:
>
> Type gebeurtenis: Waarschuwing
> Bron van gebeurtenis: MSExchangeIS
> Categorie van gebeurtenis: General
> Gebeurtenis-ID: 9554
> Datum: 4/01/2006
> Tijd: 9:04:33
> Gebruiker: n.v.t.
> Computer: SERVER2
> Beschrijving:
> Unable to update Mailbox SD in the DS. Mailbox Guid:
> 1f50f21e-ddd9-421a-a13e-319776a7fb41. Error Code 0x80040102
>
> --> I've checked this guid and it corresponds to our "Info" mailbox.
>
>
> The two domain controllers (server1 running a Dutch Windows 2000 and
> server3 running an English Windows 2003) are at that precise moment alive
> and kicking!
> But when checking their audit logs, they give me at those precise moments
> these errors:
>
> On server1, these are 565 Audit Failures:
>
> Type gebeurtenis: Controle op mislukte pogingen
> Bron van gebeurtenis: Security
> Categorie van gebeurtenis: Toegang tot Active Directory
> Gebeurtenis-ID: 565
> Datum: 4/01/2006
> Tijd: 9:04:32
> Gebruiker: HEADOFFICE\SERVER2$
> Computer: SERVER1
> Beschrijving:
> Object is geopend:
> Objectserver: DS
> Objecttype: user
> Objectnaam: CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
> Nieuwe ingang-ID: -
> Bewerking-ID: {0,25974632}
> Proces-ID: 324
> Primaire gebruikersnaam: SERVER1$
> Primair domein: HEADOFFICE
> Primaire aanmeldings-ID: (0x0,0x3E7)
> Clientgebruikersnaam: SERVER2$
> Clientdomein: HEADOFFICE
> Client-aanmeldings-ID: (0x0,0x18C575F)
> Toegangspogingen Eigenschap schrijven
>
> Machtigingen -
>
> Eigenschappen:
> Verwijderen
> READ_CONTROL
> WRITE_OWNER
> Eigenschap schrijven
> Public Information
> SYNCHRONIZE
> Self schrijven
> Eigenschap lezen
> Eigenschap schrijven
> msExchMailboxSecurityDescriptor
>
>
>
> On server3, these are 566 Audit Failures:
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Directory Service Access
> Event ID: 566
> Date: 4/01/2006
> Time: 9:04:32
> User: HEADOFFICE\SERVER2$
> Computer: SERVER3
> Description:
> Object Operation:
> Object Server: DS
> Operation Type: Object Access
> Object Type: user
> Object Name: CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
> Handle ID: -
> Primary User Name: SERVER3$
> Primary Domain: HEADOFFICE
> Primary Logon ID: (0x0,0x3E7)
> Client User Name: SERVER2$
> Client Domain: HEADOFFICE
> Client Logon ID: (0x0,0x1F73F4B)
> Accesses: Write Property
>
> Properties:
> ---
> Public Information
> msExchMailboxSecurityDescriptor
> user
>
> Additional Info:
> Additional Info2:
> Access Mask: 0x20
>
>
> So, despite the errors 2070 and 2102 that the Exchange server is giving
> and that seem to indicate a loss of connectivity with the DC's, I believe
> the errors are related to access rights to this mailbox object
> CN=Info,OU=Users en groepen,OU=Zwijndrecht,DC=hnt,DC=be
>
>
> However, after a few hours spent with ADSI edit and playing with
> permissions to that object, I still haven't resolved the problems. But I'm
> not an expert. So could anyone more experienced than me point me in the
> right direction?
>
> NB: the mail server is working fine, even the Info mailbox is working
> fine... but those errors are bothering me.
>
>
> Thank you very much.
>
>
> --
> Paul
>
date: Wed, 4 Jan 2006 16:41:16 -0800
author: Matt Kuzior [MSFT]
|
|
