Suppress MSExchangeIS Mailbox Store Logons 1022 Events
Hello. I have a Mailbox Server (2007SP1 RU7)with 90K users. The event below appears every time a mail arrives for an out of quota mailbox. The App Log fills up in minutes. Is there a way to suppress this events?Event Type:ErrorEvent Source:MSExchangeIS Mailbox StoreEvent Category:Logons Event ID:1022Date:20/09/2009Time:07:42:25 p.m.User:N/AComputer:MBX01Description:Logon Failure on database "SG34\DB34" - Windows account DOMAIN\HT01$; mailbox /o=ORG/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=USER1.Error: 1245 Client Machine: HT01 Client Process: edgetransport.exe Client ProcessId: 0 Client ApplicationId: Client=Hub Transport Thx! Andres
September 21st, 2009 2:11am

Do you have any sort of diagnostics logging turned on for the information store? In my opinion, this sounds like a small bug. The transport service should at least be able to connect to a mailbox even if the mailbox has exceeded its storage limits. I did some looking around and could not find any way to supress this particular message and really can't think of any acceptable alternatives. Do you have a plan in place to move to E2K7 SP2? With 90K users, I suspect this will not come quickly. :-)Jim McBee - Blog - http://mostlyexchange.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 21st, 2009 5:14am

Not sure if it will work or not but you could look at the audit/diag logging.Check this article:http://gsexdev.blogspot.com/2007/01/exchange-2007-diagnostic-logging.htmland this article: How to Change Logging Levels for Exchange Processeshttp://technet.microsoft.com/en-us/library/bb201670.aspxSF - MCITP:EMA, MCTS: MOSS 2007, OCS 2007, Exchange 2007
September 21st, 2009 6:26am

Jim, thx for your answer. Unfortunately all logging is at Lowest. Yes!, we are planning to move to SP2 next month, do u think there could be a solution on SP2? It could be a key factor to make the move soonerAndres
Free Windows Admin Tool Kit Click here and download it now
September 21st, 2009 3:43pm

I looked through the settings in SP2 and could not find anything that would prevent this. I'm wondering if it might be fixed in SP2, though. I did some checking and could not find anything in the list of things that were fixed, though.Jim McBee - Blog - http://mostlyexchange.blogspot.com
September 22nd, 2009 8:52am

set-eventloglevel -identity "MSExchange IS\9000 Private\Logons" -level low/medium/high/expert Check the below Articlehttp://support.microsoft.com/default.aspx/kb/968310RUS 8 could be the fix.
Free Windows Admin Tool Kit Click here and download it now
September 22nd, 2009 12:35pm

Hi,Its looking that you have single box for all role of exchage .. Is it correct ?? and also check whether OS is windows 2008To resolve this problem, install Update Rollup 9 for Exchange 2007 Service Pack 1.http://support.microsoft.com/kb/970086/Anil
September 22nd, 2009 2:42pm

@Scott andHari: As I said before all logging is at lowest...@Anil:No, we have 17 HT boxes ;) and it's all W2k3@Jim:Thx for your researching!, It's really weird that the method used to prevent a message delivery when a mailbox is full is a logon failure!
Free Windows Admin Tool Kit Click here and download it now
September 23rd, 2009 3:55pm

I don't think there is much use in you deploying either RU8 or RU9 if you are going to deploy E2K7 SP2 soon. It should include the fixes from the earlier RUs.Jim McBee - Blog - http://mostlyexchange.blogspot.com
September 23rd, 2009 9:50pm

Hi Andres, Exchange 2007 Sp2 will not "fix" this issue. This is an expected behavior and can be reproduced in my lab which has sp2 installed. When you send a mail to a mailbox which is out of quota, the 1022 events generated. This is by design and so far as i know there is no way to suppress this event. Thanks, Elvis
Free Windows Admin Tool Kit Click here and download it now
September 24th, 2009 9:12am

I think Elvis is correct. I am too facing similar situation. I have 45K users i have RU9 installed. But still seeing similar events on all the servers. Not sure if SP2 will resolve this but we are still away from SP2 intallation.
November 19th, 2009 7:04pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics