Hi experts, Logon Failure on database-Windows account mailbox /o=Organization/ou=First Administrative Group/cn=Recipients/cn=Username. Error: 1144 Client Machine: Server name Client Process: edgetransport.exe Client ProcessId: 0 Client ApplicationId: Client=HUB Please note this is CCR 2007 sp2 rollup 4 The error is coming on Active node The UserName is already deleted from the AD and Mail server But still the alert is coming on the server Regards, Manju

Please always post the entire event log entry. You can use the handy-dandy copy-to-clipboard button in the event detail window.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hi Ed, Please find it!! Log Name: Application Source: MSExchangeIS Mailbox Store Date: 3/8/2011 7:07:13 AM Event ID: 1022 Task Category: Logons Level: Error Keywords: Classic User: N/A Computer: ActiveNode.Domain.net Description: Logon Failure on database "SG01\MBX01" - Windows account Domain\Hub Transport server$; mailbox /o=Organization/ou=First Administrative Group/cn=Recipients/cn=Username. Error: 1144 Client Machine: Hub Transport server Client Process: edgetransport.exe Client ProcessId: 0 Client ApplicationId: Client=HUB Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MSExchangeIS Mailbox Store" /> <EventID Qualifiers="49168">1022</EventID> <Level>2</Level> <Task>16</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-03-08T06:07:13.000Z" /> <EventRecordID>58398</EventRecordID> <Channel>Application</Channel> <Computer>ActiveNode.Domain.net</Computer> <Security /> </System> <EventData> <Data>Domain\Hub Transport server$</Data> <Data>/o=Organization/ou=First Administrative Group/cn=Recipients/cn=Username</Data> <Data>1144</Data> <Data>SG01\MBX01</Data> <Data>CENPR354</Data> <Data>edgetransport.exe</Data> <Data>0</Data> <Data>Client=HUB</Data> <Binary>4BAD45E670C5534CA439916AC487446F5B444941475F4354585D00003E000000FFCC3100000000000002300000003A67F01FFE000000A41D40100F010480A41940100F010480841240100500078084184010050007809708401078040000</Binary> </EventData> </Event>

Are you sure the account is deleted and not just disabled?Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

I agree with Ed. Please assure the account is removed completely. For more information about the error message, please refer to the link below: http://support.microsoft.com/kb/555420 This error message also can occur by mailbox quota limit. If the issue persists, please check relevant mailbox limitation. Thanks. NovakPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Dear ED\Novaku, The account has been already deleted. Also the quota willnot come into picture when account is not there? Am i correct ? Please advice

Hi, Please open ADSIEDIT.MSC and check whether the user still exists. If so, please delete it directly. Otherwise, I suggest you restart Information Store service and check whether the Event error persists. Thanks. NovakPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I have to use ADSI edit stilll but i already restarted the information store service