Warning 2601, errors 2604 and 2501
I am getting this warning and errors from both nodes in the cluster about every 15 minutes:
Event Type:WarningEvent Source:MSExchange ADAccessEvent Category:General Event ID:2601Date:11/29/2007Time:9:14:56 AMUser:N/AComputer:MAIL-01Description:Process MSEXCHANGEADTOPOLOGY (PID=1324). When initializing a remote procedure call (RPC) to the Microsoft Exchange Active Directory Topology service, Exchange could not retrieve the SID for account <WKGUID=DC1301662F547445B9C490A52961F8FC,CN=Microsoft Exchange,CN=Services,CN=Configuration,...> - Error code=8007077f. The Microsoft Exchange Active Directory Topology service will continue starting with limited permissions.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:ErrorEvent Source:MSExchange ADAccessEvent Category:General Event ID:2604Date:11/29/2007Time:9:14:56 AMUser:N/AComputer:MAIL-01Description:Process MSEXCHANGEADTOPOLOGY (PID=1324). When updating security for a remote procedure call (RPC) access for the Microsoft Exchange Active Directory Topology service, Exchange could not retrieve the security descriptor for Exchange server object PASDEX - Error code=8007077f. The Microsoft Exchange Active Directory Topology service will continue starting with limited permissions.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:ErrorEvent Source:MSExchange ADAccessEvent Category:General Event ID:2501Date:11/29/2007Time:9:14:56 AMUser:N/AComputer:MAIL-01Description:Process MSEXCHANGEADTOPOLOGY (PID=1324). The site monitor API was unable to verify the site name for this Exchange computer - Call=DsctxGetContext Error code=8007077f. Make sure that Exchange server is correctly registered on the DNS server.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Thanks,
Steve
November 29th, 2007 1:18pm
Although the messages do appear in both cluster node's event logs, verify that the COMPUTER field is in fact the same node on each log entry. If that computer is the Passive node, then it is just an erroneous message which the application of SP1 recently resolved in the environment I witnessed this behavior.
Free Windows Admin Tool Kit Click here and download it now
December 14th, 2007 9:43am
Hi,
I am experiencing the exact same list of event log entries as the original poster, every 15 minutes too. However, this is on a single server, the only server on the network running Exchange.
Exchange 2007 SP1 was clean installed on a new Windows Server 2003 x64 R2 SP2machine in a network with an existing Exchange 2003 SP2 server. I went through the transition documentation step-by-step and ultimately uninstalled Exchange 2003 from the old server and removed that server from the domain.
We are experiencing very slow access to Public Folders from our Vista SP1, Outlook 2007 SP1 clients and I'm guessing that solving thisADAccess problem is the first step.
We are also finding that the Information Store service doesn't start at system boot, the service manager reports error 0 as the reason. This is occuring even though changes have been made to the Exchange services' DependsOnService registry value as recommended by some KB articles.
The Exchange server seems to have good network connectivity to the domain controllers. The server does use DHCP for obtaining an IP address and DNS settings but there is a reservation on the DHCP server to ensure the same address is issued every time.
Any suggestions would be appreciated.
Thanks,
February 20th, 2008 8:37pm
I setup a test environment and started getting these errors when I created two sites under the sites and services for my server (they are on two different subnets). the errors when away after moving all the servers back under a single site. not sure if that is causing the errors but if you are going to try it, please post your results here.
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2008 5:36pm
I also am getting this exactbehaviour. like a previous poster it is on a clean install, will be installing the post SP1 rollups over this comming weekend hopefully that will resolve the issue however if somone sees anything in the meantime any assistance would be apreciated.
Regards,
John
May 12th, 2008 3:52pm
I had a similar issue.I disolved my NIC teaming and problem immediately went away.I am currently looking at a new driver for my NIC and will re-try teaming to see if the problem re-occurs.
Free Windows Admin Tool Kit Click here and download it now
May 15th, 2008 1:36pm
Ron Glaister wrote:
Make sure you have KB948496 applied. This usually cures the issue. The Post-SP1 rollup implements some network scaleability features that cause some really strange connectivity errors, not just the Events 2601, 2604, 2501. KB948496 disables the chimney and a few other things in the HKLM\System\CurrentControlSet\Services\TCPIP\Parameters key (RSS & TCPA).Try it - Mikey likes it!!! :-)
Update installed, and then disabling Receive Side Scaling worked for me.
Thank you VERY much. I really didn't like unteaming as a "fix"
May 27th, 2008 11:23am
In my case this problem was caused by Exchange services starting up to fast (or network services starting up to slow).
Solved it by:
1. ChangedExchange services to manual startup
2. Made a batch script with "net start" commands that would start allthe necessaryExchange Services (and a simple ping commandto delay the scripta bit)
3. Scheduled it via Scheduled Tasks to run at computer startup.
The server also didn't always mount the databases (located on iSCSI which also had eventlog failures during startup) so my script also callsan additional Powershell script that mounts the databasesif they aren't already mounted. The scriptrepeats itself three times.
Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2008 11:41am
Steen,
I have the same case as you with Databases on iSCSI and it is showing those 3 errors. Would you mind sharing your batch and powershell script with me?
Thanks
John
sforcejr@yahoo.com
July 24th, 2008 9:47am
Steen,
I am trying to understand why does the script repeat itself three time? do you mean retry to start the services 3 times?
Thank you very much for sharing. I have been battling with the issue of the databases(in the iscsi not being mounted at startup).
John
Free Windows Admin Tool Kit Click here and download it now
July 25th, 2008 10:17pm
I changed out my Exchange 2003 server for a single 2010 server (on server 2008 R2), and began receiving those errors once I decommissioned the Exchange 2003 server. I disabled IPv6, and set the topology to delay start, and they still keep coming every
10 minutes or so. Running nslookup from the 2010 box resolves itself nicely. I've checked my NIC binding order, and the active NIC is at the top of the lists for binding. Other than those errors, all email flow seems to be working fine.
July 22nd, 2010 8:59am
Hi,
Has anyone found out why these errors occour? Have a single 2010 SP1 box [all roles] had a clean Application log, since a reboot last night I am getting these errors. Checked DNS - all ok, no issues connectivity or mail flow wise, ExBPA reports no
show stoppers. Will try the Restart of the Microsoft Exchange Active Directory topology to correct.
Fizzmo
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2010 5:12am
We've done this here and it prevents this errors from occuring but some other strange behaviour comes up:
The Services:
Microsoft Exchange Service Host
Microsoft Exchange Protected Service Host
Microsoft Exchange RPC Client Access
do not automatically start up. We can start them manually after reboot, but this is not the way it shoul work like. The system holds all the current fixes which are available and it is the same on all 4 nodes within this one HUB/CAS Unicast NLB-Array.
Any ideas welcome!
Best regards out of snowy Switzerland ...
Stefan
December 14th, 2010 8:51am
Hi all just an update restarted the Microsoft Exchange Active Directory topology to correct.
Free Windows Admin Tool Kit Click here and download it now
January 4th, 2011 11:04am
I noticed that restarting the Active Directory topology service requires a restart of the following dependent services:
Microsoft Exchange Transport Log Search
Microsoft Exchange Transport Log
Microsoft Exchange Service Host
Microsoft Exchange Search Indexer
Microsoft Exchange Replication Service
Microsoft Exchange Mail Submission
Microsoft Exchange Mailbox Assistants
Microsoft Exchange File Distribution
Microsoft Exchange EdgeSync
Microsoft Exchange Anti-spam Update
As I have a lot of users on this server: how will this impact them? I tested on a lab server & things seem OK, but I want to be 100% sure. (no users on the test server but me) Anyone tried this on a busy server, and what happened?
Regards, Paul www.servercare.nl
June 27th, 2011 5:48am
It seems to work fine for me too.
+++++++++++++++++++++++++++
Exchange 2007 sp1
Free Windows Admin Tool Kit Click here and download it now
September 22nd, 2011 10:15pm
Disableing IPV6 solved the problem for me. 2k8 R2 exch 2k10. Additionally, I couldn't connect to the exchange server from clients. Once IPV6 was disabled, the MSEXCHANGEADTOPOLOGY and the clinet connectivity issues dissappeared. I'm going to set static
IPV6 and test again but for the moment it is all working.
September 30th, 2011 12:54am
KB948496 REALLY SOLVES THIS ISSUES, INCLUDING THE UNSTARTED EXCHANGE SERVICE ISSUE AFTER REBOOT, SO THAT YOU HAVE TO START IT MANUALLY.
OUR SYSTEM: WINDOWS SERVER 2003 R2 X64 with EXCHANGE 2007 SP3, ROLLUP 5
Free Windows Admin Tool Kit Click here and download it now
December 1st, 2011 1:33pm
I setup a test environment and started getting these errors when I created two sites under the sites and services for my server (they are on two different subnets). the errors when away after moving all the servers
back under a single site. not sure if that is causing the errors but if you are going to try it, please post your results here.
I was not seeing this in the event log until yesterday when I configured the two subnets on our network under Default Site (they hadn't been there ever). I just deleted the subnets, cleared the event log, and am no longer seeing this.
Thanks! As soon as I read your post, I knew that had to be it! I'm guessing the 15 minute interval is from your replication configuration.
September 19th, 2012 7:15pm