Ex2010 Hosted - Event ID 4002 (Full Version)

All Forums >> [Microsoft Exchange 2010] >> General



Message


darrenruk -> Ex2010 Hosted - Event ID 4002 (23.Nov.2011 5:41:54 AM)

Hi all,

I hope someone can shed some light on an Application event ID 4002 that we are seeing on our Exchange 2010 Mailbox server. Everything appears to be working okay on Exchange but this event ID is logged every 30 mins. The current set up is Ex2010 SP1 Hosted on 1 CAS/Hub and 1 Mbx server. We're only seeing this on the Mbx server.

The usual Googlin' the error hasn't come up with anything useful. I've seen a few articles regarding mailbox arbitration but we're not getting the same symptoms, and a few others stating that ADPrep should be re-run but again we don't have the same symptoms that the other people seem to have.

AuditLogSearch 4002  Unable to open message store

A runtime exception occurred in AuditLogSearchServicelet's worker while processing a request. Exception:
Microsoft.Exchange.Data.Storage.ObjectNotFoundException: Cannot open mailbox /o=DOMAINNAME/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=EXCHANGE SERVER/cn=Microsoft System Attendant. ---> Microsoft.Mapi.MapiExceptionNotFound: MapiExceptionNotFound: Unable to open message store. (hr=0x8004010f, ec=-2147221233)
Diagnostic context:
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=249]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0x0][length=312][latency=0]
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropLogon [254]
Lid: 17082 ROP Error: 0x8004010F
Lid: 26937
Lid: 21921 StoreEc: 0x8004010F
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropLogon [254]
Lid: 22787 Error: 0x0
Lid: 13032 StoreEc: 0x8004010F
Lid: 25848
Lid: 7588 StoreEc: 0x8004010F
Lid: 25840
Lid: 6564 StoreEc: 0x8004010F
Lid: 22957 Error: 0x0
Lid: 19693 Error: 0x0
Lid: 17917 Error: 0x0
Lid: 16893 Error: 0x0
Lid: 27395 Error: 0x0
Lid: 57361
Lid: 14312 StoreEc: 0x8004010F
Lid: 25516 StoreEc: 0x8004010F
Lid: 64055
Lid: 2199 StoreEc: 0x8004010F
Lid: 56415
Lid: 48223 StoreEc: 0x8004010F
Lid: 17097 StoreEc: 0x8004010F
Lid: 8620 StoreEc: 0x8004010F
Lid: 1750 ---- Remote Context End ----
Lid: 26849
Lid: 21817 ROP Failure: 0x8004010F
Lid: 26297
Lid: 16585 StoreEc: 0x8004010F
Lid: 32441
Lid: 1706 StoreEc: 0x8004010F
Lid: 24761
Lid: 20665 StoreEc: 0x8004010F
Lid: 25785
Lid: 29881 StoreEc: 0x8004010F
at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, SafeExInterfaceHandle iUnknown, Exception innerException)
at Microsoft.Mapi.ExRpcConnection.OpenMsgStore(OpenStoreFlag storeFlags, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, MapiStore msgStorePrivate, String& correctServerDn, ClientIdentityInfo clientIdentityAs, String userDnAs, String applicationId, CultureInfo cultureInfo)
at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout)
at Microsoft.Mapi.MapiStore.OpenMailbox(String serverDn, String userDn, String mailboxDn, String userName, String domainName, String password, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, WindowsIdentity windowsIdentity, String applicationId)
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
at Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(MapiStore linkedStore, LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, GenericIdentity auxiliaryIdentity)
at Microsoft.Exchange.Data.Storage.MailboxSession.<>c__DisplayClass12.<CreateMailboxSession>b__10(MailboxSession mailboxSession)
at Microsoft.Exchange.Data.Storage.MailboxSession.InternalCreateMailboxSession(LogonType logonType, ExchangePrincipal owner, CultureInfo cultureInfo, String clientInfoString, IAccountingObject budget, Action`1 initializeMailboxSession, InitializeMailboxSessionFailure initializeMailboxSessionFailure)
at Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String clientInfoString, PropertyDefinition[] mailboxProperties, IList`1 foldersToInit, GenericIdentity auxiliaryIdentity, IAccountingObject budget)
at Microsoft.Exchange.Data.Storage.MailboxSession.ConfigurableOpen(ExchangePrincipal mailbox, MailboxAccessInfo accessInfo, CultureInfo cultureInfo, String clientInfoString, LogonType logonType, PropertyDefinition[] mailboxProperties, InitializationFlags initFlags, IList`1 foldersToInit, IAccountingObject budget)
at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, MailboxAccessInfo accessInfo, LogonType logonType, CultureInfo cultureInfo, String clientInfoString, Boolean useLocalRpc, Boolean ignoreHomeMdb, Boolean recoveryDatabase)
at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString, Boolean useLocalRpc, Boolean ignoreHomeMdb, GenericIdentity auxiliaryIdentity)
at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString)
at Microsoft.Exchange.Management.SystemConfigurationTasks.AuditLogSearchDataProviderBase.GetMailboxSession(ADUser mailbox, String action)
at Microsoft.Exchange.Servicelets.AuditLogSearch.TenantWorker.GetSearchWorker(ADUser arbMbx)
at Microsoft.Exchange.Servicelets.AuditLogSearch.TenantWorker.DoWork()




travis.sheldon -> RE: Ex2010 Hosted - Event ID 4002 (23.Nov.2011 1:29:58 PM)

Did you rename / delete the original Exchange database? The error is indicating that the System Attendant account isn't able to be accessed on its assigned DB

Please check out the post @ http://social.technet.microsoft.com/Forums/en-US/exchangesvrdevelopment/thread/23d252fe-c6e6-4ce7-b5f6-95a37846ce6d/




darrenruk -> RE: Ex2010 Hosted - Event ID 4002 (24.Nov.2011 4:25:34 AM)

Fantastic. Thank you very much. I think you've nailed that one.

I ran through the ADSI values as per the link and yes the system attendant was missing CN=Servername at the start. It went straight to the database name.

I've made the change, so fingers crossed...




Page: [1]