Hello- We just went live with our Exchange 2007 SP1 Rollup4 server. We are yusing Google/Postini for our antispam. I am receiving a ton of these messages in the application log: Log Name: ApplicationSource: MSExchangeISDate: 12/9/2008 11:33:18 AMEvent ID: 9873Task Category: GeneralLevel: InformationKeywords: ClassicUser: N/AComputer: server.domain.comDescription:A named property has been created for the database "/o=/ou=Exchange Administrative Group/cn=Configuration/cn=Servers/cn=/cn=Microsoft Private MDB".ID: 0x870e Named property GUID: 00020386-0000-0000-c000-000000000046Named property name/ID: x-spam-quarantineThe following user is attempting to create the named property: "N/A"Protocol: MAPIClient type: TransportClient version: 2049.0.33079.2 Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MSExchangeIS" /> <EventID Qualifiers="16390">9873</EventID> <Level>4</Level> <Task>6</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-09T16:33:18.000Z" /> <EventRecordID>31942</EventRecordID> <Channel>Application</Channel> <Computer>Server.domain.com</Computer> <Security /> </System> <EventData> <Data>/o=/ou=Exchange Administrative Group/cn=Configuration/cn=Servers/cn=/cn=Microsoft Private MDB</Data> <Data>0x870e</Data> <Data>00020386-0000-0000-c000-000000000046</Data> <Data>x-spam-quarantine</Data> <Data>N/A</Data> <Data>MAPI</Data> <Data>Transport</Data> <Data>2049.0.33079.2</Data> </EventData></Event> I've read about the x headers which can cause this sort of issue but how do I stop it from happenning? I'd rather not have to move mailboxes if the table entries fill up. Thanks in advance! Eric

Hi! Did you move mailbox in your organization recently? If so, please let me know the user name that you moved. Open Event Viewer, right click application, and save the application log file as .evt file and send it to v-rocwan@microsoft.com for analyze. Also, you can try the following suggesting: Try to restart Microsoft Exchange System Attendant service and check the effect. Try to disable Google/Postini antispam software and check the effect. Note: when you send e-mail to me, please let me know the subject of the post. Thanks for your cooperation. Rock Wang - MSFT

The app log is huge so I will not be sending that out. We imported all of the mailboxes from PST files from another domain that was running Exchange 2003. No Mailboxes were moved at all. This is a fresh installation. The only changes were the mailbox imports. -Eric

Dear customer: For your convenience, I have created a workspace for you. You can upload the information files to the following link. (Please choose "Send Files to Microsoft") Workspace URL: (https://sftus.one.microsoft.com/choosetransfer.aspx?key=a52ccffe-6005-4d0f-b6f3-731f6b193ac1) Let me know your e-mail address and I will send the Password to you. Thanks for your cooperation. Rock Wang - MSFTRock Wang MSFT

swede375@hotmail.comThanks,Eric

Hi:I have sent the password and workspace URL to you. Please upload the application log, thanks!Rock Wang - MSFTRock Wang MSFT

Dear customer: Based on my knowledge, the 9873 logs level is only information; it doesnt look like an error. Did your Exchange server encounter issue now, such as mail flow or others? Also, you can run EXBPA tool from toolbox, and check the result. Hope it helps. Rock Wang - MSFTRock Wang MSFT

Hi Rock, I have the same issue and started happening when we added back a repaired node in the cluster. An EXCDO warning is being issued as well Thanks, -plagooms Event Type: Information Event Source: MSExchangeIS Event Category: General Event ID: 9873 Date: 5/10/2009 Time: 12:29:11 PM User: N/A Computer: xxxxxxxx Description: A named property has been created for the database "/o=Exchange Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=APAXM3111/cn=Microsoft Private MDB". ID: 0x867e Named property GUID: 00020386-0000-0000-c000-000000000046 Named property name/ID: x-messageid The following user is attempting to create the named property: "N/A" Protocol: MAPI Client type: Transport Client version: 2049.0.33127.2 Event Type: Warning Event Source: EXCDO Event Category: General Event ID: 8230 Date: 5/11/2009 Time: 8:11:34 AM User: N/A Computer: xxxxxxx Description: An inconsistency was detected in user@domain.com: /Calendar/TA HR?Resource Mgt?Recruitment Catch up-2.EML. The calendar is being repaired. If a problem persists, please recreate the calendar or the containing mailbox. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.