Event ID: 9323 OAL Generator - Invalid or Expired Email Certificates
Hello, I get these warnings on my Active Node SCC - Exchange 2007 SP2. Event Type: Warning Event Source: MSExchangeSA Event Category: OAL Generator Event ID: 9323 Date: 8/16/2011 Time: 6:10:13 PM User: N/A Computer: SCC-1 Description: Entry 'Smith Hang' has invalid or expired e-mail certificates. These certificates will not be included in the offline address list for '\Global Address List'. - OAB1 Offline Address Book There are loads of users which have expired certificate, I cannot manualy visit each user in AD and remove the expired certificates. There must be a way to remove automatically or some regedit!!!! I am also looking to remove expired certificates from my CA Admin Console to see if this will fix this issue too. Advise is appreciated. Thanks!!!
August 17th, 2011 10:51am

What did you use to put those certificates in originally? You can write a script that clears that certificate property in AD for all users, but I don't have a sample, sorry.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2011 9:28pm

On Wed, 17 Aug 2011 14:41:57 +0000, WildPacket wrote: >I get these warnings on my Active Node SCC - Exchange 2007 SP2. > >Event Type: Warning Event Source: MSExchangeSA Event Category: OAL Generator Event ID: 9323 Date: 8/16/2011 Time: 6:10:13 PM User: N/A Computer: SCC-1 Description: Entry 'Smith Hang' has invalid or expired e-mail certificates. These certificates will not be included in the offline address list for '\Global Address List'. - OAB1 Offline Address Book > >There are loads of users which have expired certificate, I cannot manualy visit each user in AD and remove the expired certificates. There must be a way to remove automatically or some regedit!!!! I am also looking to remove expired certificates from my CA Admin Console to see if this will fix this issue too. > >Advise is appreciated. Either remove them or ignore the events. This might be a place to start if you want to try your hand ad scripting a way to deal with them (or searching further to se of some's already written something): http://blogs.technet.com/b/exchange/archive/2005/07/25/408188.aspx --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
August 17th, 2011 9:49pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics