Answered by:
Getting Event: MSExchangeIS 9554 Unable to update Mailbox SD in the DS. Mailbox Guid: <guid>. Error Code 0x8004010f

Question
-
I've found the user object, and I've seen articles that say to make sure that the allow inherited permissions to propagate is checked, but that option is already checked on this user object.
In this particular case, this is a disabled user with a recently disconnected mailbox.
Exchange 2007 SP3. Thoughts?
Monday, March 26, 2012 5:22 PM
Answers
-
I wound up doing this for all 8, and it cleared up the 9554 errors.
First, I found all the users by the GUIDs:
$mbstats = Get-MailboxStatistics -server exchangeserver
$mbstats | ? { $_.MailboxGuid -eq '0f65b98c-de42-4a11-80c5-4a4e7e8c7a6c' } | flI then re-enabled the user accounts and attached their old mailboxes back to them.
Waited 30 minutes
Disabled the mailboxes
Waited 30 minutes
Disabled the user accounts again.
- Marked as answer by AR5 Wednesday, March 28, 2012 6:39 PM
Wednesday, March 28, 2012 6:39 PM
All replies
-
Hi,
Sorry. Did you prepare the AD schema before installing the SP3 for Exchange 2007? If no, run the Setup /PrepareAD command. And view the links below,
Hope, these will helpful.
MCTS: Microsoft Exchange Server 2007/2010 | MCSA
- Edited by Andrey Podlesnykh Monday, March 26, 2012 8:23 PM
Monday, March 26, 2012 8:16 PM -
Yes I prepared the AD schema.
Those articles were not helpful. I have done quite a bit of searching on this today, and no real answers. Those links you gave me have things marked as answers, but they're not really answers to any problem.
Monday, March 26, 2012 9:22 PM -
Hi
1. It is DC problem.
Set-exchangeserver -id server –StaticDomainControllers
Meanwhile, Please run the Exchange setup.com on the DC server
Setup /pd
2. You can ran command:
get-mailbox “guid”
Does this mailbox point to a user showing in the GAL?
Can you find user in the GAL? GAL doesn’t get update due to AD replication will cause this kind of problem
3. User permission problem.
You can set permission “everyone”group and test it again. If it is permission problem, you have to compare permission
of this user with permission of other user and modify value.
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.comTerence Yu
TechNet Community Support
Tuesday, March 27, 2012 2:25 AM -
1. This site has 3 DC/GC in it. Which one would I do that on?
2. No, the user is not in the GAL (their mailbox was recently disabled and shows in the disconnected mailbox section)
3. When you say user permission problem. Are saying on the AD object? I've compared, they all seem the same as they are inherited.
A little more background... we 'cleaned up' about 200 accounts in our Exchange system. Basically these were the accounts that some how slipped past our official processes. By 'cleaned up', all I mean is that we disabled the mail features on the AD account. Of the 200+ accounts disabled, 7 of them are showing up with these 9554 events now. Once again, these event IDs are showing up for mailboxes that have been disconnected from their previous AD accounts.
Tuesday, March 27, 2012 12:16 PM -
Hi
Thanks for your update.
You had better the the ldp for good user and bad user.
I believe that you will find attribute missing on bad user.
Using Ldp.exe to Find Data in the Active DirectoryTerence Yu
TechNet Community Support
Wednesday, March 28, 2012 2:03 AM -
I wound up doing this for all 8, and it cleared up the 9554 errors.
First, I found all the users by the GUIDs:
$mbstats = Get-MailboxStatistics -server exchangeserver
$mbstats | ? { $_.MailboxGuid -eq '0f65b98c-de42-4a11-80c5-4a4e7e8c7a6c' } | flI then re-enabled the user accounts and attached their old mailboxes back to them.
Waited 30 minutes
Disabled the mailboxes
Waited 30 minutes
Disabled the user accounts again.
- Marked as answer by AR5 Wednesday, March 28, 2012 6:39 PM
Wednesday, March 28, 2012 6:39 PM