The Microsoft Exchange Mail Submission Service is currently unable to contact any Hub Transport servers in the local Active Directory site. The servers may be too busy to accept new connections at this time.
Hello,
We have 2 Exchange 2007 SP1 Roll up 8 servers running Mailbox and Hub transport role on both the servers.
I am also seeing this same warning message and when it appears users are not able to send or receive any emails. There are no other warnings or errors and no back pressure issues. This is the only warning message we are seeing. When this warning appears I do not see any issues with RAM, Virtual memory or CPU everything seems normal just "Submission" queue has lot of messages in it. To resolve this issue we have to restart the server.
I am aware of this information http://www.microsoft.com/products/ee/transform.aspx?ProdName=Exchange&ProdVer=8.1.240.1&EvtID=1009&EvtSrc=MSExchangeMailSubmission&FileVer=8.1.240.1&FileName=&EvtType=&LCID=3081
All the 3 explanations mentioned in this does not match to our issues. It also says to increase MaxConcurrentMailboxSubmissions. Currently our servers are set to 30. I was wondering and wanted to be sure that if we increase this number it would not create any other issues or it would resolve the problem. Or is there any other possibility or issues which could be triggering this event id 1009 warning.
I appreciate your help or suggestions.
Thanks,
=================
Event Type: Warning
Event Source: MSExchangeMailSubmission
Event Category: MSExchangeMailSubmission
Event ID: 1009
Date: 10/8/2009
Time: 7:38:24 AM
User: N/A
Computer: WWMAIL06
Description:
The Microsoft Exchange Mail Submission Service is currently unable to contact any Hub Transport servers in the local Active Directory site. The servers may be too busy to accept new connections at this time.
===================
Raman
Raman
Answers
Hi,
1. Please check if “Everyone, Administrators, Backup Operators, Power Users, and Users” is under list for “Access this computer from the network” in the Group Policy MMC under, Local Computer Policy / Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment /.
Note: You can run secpol.msc to check the local security policy on Hub server.
2. Please check for Manage auditing and security logs on the Default Domain Controllers Policy to see if the "Exchange Servers" group is present there.
3. Also check on the Exchange server object for the “Constrained Delegation" rights
and see if the "Exchange servers" group has Allow for the Following rights ,
Security Tab , Advanced Settings
a) Store Constrained Delegation
b) Store Read and Write Access
c) Store Read only Access
d) Store Transport Access4. Please check if the log on account for Microsoft Exchange Mail Submission service is "local system" account.
Note: You can follow the steps below to check it.
1. Click on start--> Run.
2. Type Services.msc
3. Select "Microsoft Exchange Mail Submission" service.
4. Right click and Select property.
5. Select Log on Tab.
6. Select Local System account option.
7. Apply.
8. Ok.
5. Please try to run ExBPA to have a health scan.
Regards,
Xiu
- Marked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
Hi,
For 2,you can follow the steps in article below to open Default Domain Policy and then navigate to Computer Configuration-Windows Settings-Security Settings-Local Policies-User Rights-Manage auditing and security log, there please check if Exchange Server group has been added there.Open Group Policy from Active Directory Users and Computers
http://technet.microsoft.com/en-us/library/cc781159(WS.10).aspx
For 3, please ADSIEdit.msc navigate to the Exchange server object and view the properties.
2). Switch to the Security tab and click Advanced.
3). Sort the columns by "Name" and locate the entries for "Exchange Servers"
4). Verify if there are explicit Deny Exchange Servers settings (4) for problematic account following rights:
Store Constrained Delegation
Store Read and Write Access
Store Read only Access
Store Transport AccessMore information to share with you:
Troubleshooting Mail Flow from Exchange 2007 to Exchange 2003 When E-Mail Messages are Stuck in the Queue
Regards,
Xiu
- Marked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
All Replies
- Have you checked your AntiVirus software to see what it is doing while your having the issue?
Thanks
Will
Will Shepherd - MCSE/MCITP/MCTS (Windows 2008,Exchange 2007,OCS 2007) - Hello Will,
Thanks for your response. I did check that McAfee AntiVirus is not scanning any Exchange files. We have already excluded all the Exchange folders.
I also checked the McAfee Group Shield for Exchange 2007 and that was taking the normal email scan time.
Not sure what else to check.
Please let me know if you have any other advise.
Thanks,
Regards
Raman
Raman Hi,
1. Please check if “Everyone, Administrators, Backup Operators, Power Users, and Users” is under list for “Access this computer from the network” in the Group Policy MMC under, Local Computer Policy / Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment /.
Note: You can run secpol.msc to check the local security policy on Hub server.
2. Please check for Manage auditing and security logs on the Default Domain Controllers Policy to see if the "Exchange Servers" group is present there.
3. Also check on the Exchange server object for the “Constrained Delegation" rights
and see if the "Exchange servers" group has Allow for the Following rights ,
Security Tab , Advanced Settings
a) Store Constrained Delegation
b) Store Read and Write Access
c) Store Read only Access
d) Store Transport Access4. Please check if the log on account for Microsoft Exchange Mail Submission service is "local system" account.
Note: You can follow the steps below to check it.
1. Click on start--> Run.
2. Type Services.msc
3. Select "Microsoft Exchange Mail Submission" service.
4. Right click and Select property.
5. Select Log on Tab.
6. Select Local System account option.
7. Apply.
8. Ok.
5. Please try to run ExBPA to have a health scan.
Regards,
Xiu
- Marked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
- Hello Xiu,
I have checked point 1 and 4 and everything seems fine. How do I check point "2 and 3".
Apart from it I receive event id 1009 sometimes once in a month or 2 weeks. Every thing works as expected until I receive this warning. So if there is some security issues it would have come up more often.
I have also run ExBPA health Sacn that also does not tell anything which can indicate where is the problem.
Thanks for your help.
Regards
Raman
Raman- Marked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
- Unmarked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
Hi,
For 2,you can follow the steps in article below to open Default Domain Policy and then navigate to Computer Configuration-Windows Settings-Security Settings-Local Policies-User Rights-Manage auditing and security log, there please check if Exchange Server group has been added there.Open Group Policy from Active Directory Users and Computers
http://technet.microsoft.com/en-us/library/cc781159(WS.10).aspx
For 3, please ADSIEdit.msc navigate to the Exchange server object and view the properties.
2). Switch to the Security tab and click Advanced.
3). Sort the columns by "Name" and locate the entries for "Exchange Servers"
4). Verify if there are explicit Deny Exchange Servers settings (4) for problematic account following rights:
Store Constrained Delegation
Store Read and Write Access
Store Read only Access
Store Transport AccessMore information to share with you:
Troubleshooting Mail Flow from Exchange 2007 to Exchange 2003 When E-Mail Messages are Stuck in the Queue
Regards,
Xiu
- Marked As Answer byMike ShenMSFT, ModeratorFriday, November 13, 2009 9:32 AM
