|
|
|
date: Thu, 25 May 2006 18:11:01 -0700,
group: microsoft.public.exchange2000.misc
back
Public folder being deleted automatically??????
Hello,
I'm having a really, really bizarre problem with our Exchange 2000 Std
Edition (SP3 with the latest service packs/fixes, etc). Only one of our
public folders keeps deleting itself at random times for no reason. When
this problem first started happening, we thought it was one of the users who
kept doing it. But no one but the administrator account had ownership of
this public folder, so deletion on the users part was impossible.
So, we were able to get the hotfix listed in this article:
http://support.microsoft.com/?kbid=884863
That enabled the logging of the public folder deletions and the logging
information revealed that it was the Administrator account deleting the
public folder all along! The frequency of these deletions is impossible to
track as we'll have no problems for 2 months then - bam its gone (so we
restore it). Then one day it will disappear (we restore it) and then
disappear again.
One night, we took down the public folder store and ran the integrity
utility (isinteg) utility and it didn't find anything wrong with the
database. After the defrag, it ran for a month without any issue and
suddenly just disappear again.
The Event logs displayed the following:
-At 1:39 PM /Folder XYZ with folder ID was deleted by .... user account
\XYZadmin (our admin account for exchange)
In the Exchange System Manager, we find out that at 1:38, the NT
AUTHORITY\SYSTEM account logged in under the XYZadmin account on the Client
Version: HTTP.
Does anyone know why the Windows 2000 Account is logging on as NT
AUTHORITY\SYSTEM and deleting ONLY THIS ONE public folder???
We are getting additionally (since the General logging is set to Maximum),
notification messages that state that Folder Restrictions are also being
deleted? This is occuring everyday and from many different accounts. I'm
not sure if this is just an exchange server procedure or what....any ideas?
Any help you can provide is MUCH APPRECIATED! We've been banging our heads
on this for a while now.
Thanks,
Mike
date: Thu, 25 May 2006 18:11:01 -0700
author: mike8675309
Re: Public folder being deleted automatically??????
I would check the Time Limit on the store in ESM. Drill down to the folder
in question and check it's properties, under the Limits tab. Check for the
Age Limits near the bottom of the page as well as the Deletion settings.
--
Thanks for your Time.
Remove the kNOT to reply.
But it is best to share it with the group.
"mike8675309" wrote in message
news:F9B2880E-E0A5-4E59-95ED-0A47F6658207@microsoft.com...
> Hello,
>
> I'm having a really, really bizarre problem with our Exchange 2000 Std
> Edition (SP3 with the latest service packs/fixes, etc). Only one of our
> public folders keeps deleting itself at random times for no reason. When
> this problem first started happening, we thought it was one of the users
who
> kept doing it. But no one but the administrator account had ownership of
> this public folder, so deletion on the users part was impossible.
>
> So, we were able to get the hotfix listed in this article:
> http://support.microsoft.com/?kbid=884863
>
> That enabled the logging of the public folder deletions and the logging
> information revealed that it was the Administrator account deleting the
> public folder all along! The frequency of these deletions is impossible
to
> track as we'll have no problems for 2 months then - bam its gone (so we
> restore it). Then one day it will disappear (we restore it) and then
> disappear again.
>
> One night, we took down the public folder store and ran the integrity
> utility (isinteg) utility and it didn't find anything wrong with the
> database. After the defrag, it ran for a month without any issue and
> suddenly just disappear again.
>
> The Event logs displayed the following:
>
> -At 1:39 PM /Folder XYZ with folder ID was deleted by .... user account
> \XYZadmin (our admin account for exchange)
>
> In the Exchange System Manager, we find out that at 1:38, the NT
> AUTHORITY\SYSTEM account logged in under the XYZadmin account on the
Client
> Version: HTTP.
>
> Does anyone know why the Windows 2000 Account is logging on as NT
> AUTHORITY\SYSTEM and deleting ONLY THIS ONE public folder???
>
> We are getting additionally (since the General logging is set to Maximum),
> notification messages that state that Folder Restrictions are also being
> deleted? This is occuring everyday and from many different accounts.
I'm
> not sure if this is just an exchange server procedure or what....any
ideas?
>
> Any help you can provide is MUCH APPRECIATED! We've been banging our heads
> on this for a while now.
>
> Thanks,
>
> Mike
date: Mon, 29 May 2006 15:41:58 -0400
author: YorS
Re: Public folder being deleted automatically??????
YorS,
Thank you kindly for your reply. In the ESM, no specific Age limits have
been set and all public folders just have the "Use default" Age limit
setting. All other public folders have never been deleted, just this one.
We created a brand new public folder, reset the permissions, copied the
contents into the new folder and we thought that would have solved the
problem, but *bam* it randomly went away again. The interval is the tricky
because we could be going well 2-3 weeks and then it will go away again.
Sometimes its disappeared twice in one day after a restoration.
Appreciate any further thoughts you have on the subject.
Kind Regards,
Mike
"YorS" wrote:
> I would check the Time Limit on the store in ESM. Drill down to the folder
> in question and check it's properties, under the Limits tab. Check for the
> Age Limits near the bottom of the page as well as the Deletion settings.
>
> --
> Thanks for your Time.
> Remove the kNOT to reply.
> But it is best to share it with the group.
>
>
> "mike8675309" wrote in message
> news:F9B2880E-E0A5-4E59-95ED-0A47F6658207@microsoft.com...
> > Hello,
> >
> > I'm having a really, really bizarre problem with our Exchange 2000 Std
> > Edition (SP3 with the latest service packs/fixes, etc). Only one of our
> > public folders keeps deleting itself at random times for no reason. When
> > this problem first started happening, we thought it was one of the users
> who
> > kept doing it. But no one but the administrator account had ownership of
> > this public folder, so deletion on the users part was impossible.
> >
> > So, we were able to get the hotfix listed in this article:
> > http://support.microsoft.com/?kbid=884863
> >
> > That enabled the logging of the public folder deletions and the logging
> > information revealed that it was the Administrator account deleting the
> > public folder all along! The frequency of these deletions is impossible
> to
> > track as we'll have no problems for 2 months then - bam its gone (so we
> > restore it). Then one day it will disappear (we restore it) and then
> > disappear again.
> >
> > One night, we took down the public folder store and ran the integrity
> > utility (isinteg) utility and it didn't find anything wrong with the
> > database. After the defrag, it ran for a month without any issue and
> > suddenly just disappear again.
> >
> > The Event logs displayed the following:
> >
> > -At 1:39 PM /Folder XYZ with folder ID was deleted by .... user account
> > \XYZadmin (our admin account for exchange)
> >
> > In the Exchange System Manager, we find out that at 1:38, the NT
> > AUTHORITY\SYSTEM account logged in under the XYZadmin account on the
> Client
> > Version: HTTP.
> >
> > Does anyone know why the Windows 2000 Account is logging on as NT
> > AUTHORITY\SYSTEM and deleting ONLY THIS ONE public folder???
> >
> > We are getting additionally (since the General logging is set to Maximum),
> > notification messages that state that Folder Restrictions are also being
> > deleted? This is occuring everyday and from many different accounts.
> I'm
> > not sure if this is just an exchange server procedure or what....any
> ideas?
> >
> > Any help you can provide is MUCH APPRECIATED! We've been banging our heads
> > on this for a while now.
> >
> > Thanks,
> >
> > Mike
>
>
>
date: Wed, 31 May 2006 17:04:02 -0700
author: mike8675309
|
|