Event 2937 – HomeMTA pointing to the Deleted Objects container
Recently I came across the following warning.
Log Name: Application<br/>Source: MSExchange ADAccess<br/>Date: 23-9-2010 17:06:55<br/>Event ID: 2937<br/>Task Category: Validation<br/>Level: Warning<br/>Keywords: Classic<br/>User: N/A<br/>Computer: exchangeserver.domain.local<br/>Description:<br/>Process powershell.exe (PID=8552). Object [CN=FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042,CN=OU,DC=domain,DC=local]. Property [HomeMTA] is set to value [domain.local/Configuration/Deleted Objects/Microsoft MTA DEL:ceb6fb78-f913-4907-9522-3f2f20e20d1a], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.<br/>Event Xml:<br/><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><br/><System><br/><Provider Name="MSExchange ADAccess" /><br/><EventID Qualifiers="32768">2937</EventID><br/><Level>3</Level><br/><Task>6</Task><br/><Keywords>0x80000000000000</Keywords><br/><TimeCreated SystemTime="2010-09-23T15:06:55.000000000Z" /><br/><EventRecordID>49552</EventRecordID><br/><Channel>Application</Channel><br/><Computer>exchangeserver.domain.local</Computer><br/><Security /><br/></System><br/><EventData><br/><Data>powershell.exe</Data><br/><Data>8552</Data><br/><Data>CN=FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042,CN=OU,DC=domain,DC=local</Data><br/><Data>HomeMTA</Data><br/><Data>domain.local/Configuration/Deleted Objects/Microsoft MTADEL:ceb6fb78-f913-4907-9522-3f2f20e20d1a</Data><br/></EventData><br/></Event>
The process can be anything related to Exchange. I’ve seen:
- MSExchangeMailboxAssistants.exe
- w3wp.exe
- Microsoft.Exchange.RpcClientAccess.Service.exe
- Microsoft.Exchange.ServiceHost.exe
- ExSetupUI.exe
- powershell.exe
The object can also change. I’ve seen:
- Administrator
- SystemMailbox.<GUID>
- FederatedEmail.<GUID>
This probably started because I upgraded Exchange 2010 to SP1. Thanks to Kevin Ca I now know how to correct the issue.
In the Exchange Management Shell do a Get-Mailbox to get the mailbox. Use the -Arbitration switch to get the system mailboxes. Then pipe that to Update-Recipient.
[Powershell]Get-Mailbox Administrator | Update-Recipient[/Powershell]
If you’re using the -Arbitration switch you might have to further specify the mailbox. An easy way is:
[Powershell]Get-Mailbox -Arbitration | Where {$_.Name -like “SystemMailbox{E3*” } | Update-Recipient [/Powershell]
Running the Update-Recipient cmdlet on a mailbox reinitializes the HomeMTA value and solves the warning message.
September 28th, 2010 - 03:10
perfect – thanks!
September 28th, 2010 - 07:52
You’re welcome!
October 18th, 2010 - 18:37
nice article, keep the posts coming
October 25th, 2010 - 13:41
Had to take a short break as I was doing a SharePoint 2010 course, but will do!
October 21st, 2010 - 18:00
Helpful blog, bookmarked the website with hopes to read more!
October 25th, 2010 - 13:37
And read more you can! Soon I’ll also be posting more about SharePoint 2010 as that’s the next project that is comming up!
October 23rd, 2010 - 14:14
I just signed up to your blogs rss feed. Will you post more on this subject?
October 25th, 2010 - 13:36
I post about issues as I run into them. It’s very likely that I’ll post more about Exchange!