locked
Getting Event: MSExchangeIS 9554 Unable to update Mailbox SD in the DS. Mailbox Guid: <guid>. Error Code 0x8004010f RRS feed

  • Question

  • I've found the user object, and I've seen articles that say to make sure that the allow inherited permissions to propagate is checked, but that option is already checked on this user object.

    In this particular case, this is a disabled user with a recently disconnected mailbox.

    Exchange 2007 SP3.  Thoughts?

    Monday, March 26, 2012 5:22 PM

Answers

  • I wound up doing this for all 8, and it cleared up the 9554 errors.

    First, I found all the users by the GUIDs:

    $mbstats = Get-MailboxStatistics -server exchangeserver
    $mbstats | ? { $_.MailboxGuid -eq '0f65b98c-de42-4a11-80c5-4a4e7e8c7a6c' } | fl

    I then re-enabled the user accounts and attached their old mailboxes back to them.

    Waited 30 minutes

    Disabled the mailboxes

    Waited 30 minutes

    Disabled the user accounts again.

    • Marked as answer by AR5 Wednesday, March 28, 2012 6:39 PM
    Wednesday, March 28, 2012 6:39 PM

All replies

  • Hi,

    Sorry. Did you prepare the AD schema before installing the SP3 for Exchange 2007? If no, run the Setup /PrepareAD command. And view the links below,

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/484cd84f-f94a-422c-8b31-603c3c80ff67

    http://social.technet.microsoft.com/Forums/en/exchangesvradmin/thread/35c07d4b-8ff0-42f7-bc86-627877330d50

    Hope, these will helpful.


    MCTS: Microsoft Exchange Server 2007/2010 | MCSA



    Monday, March 26, 2012 8:16 PM
  • Yes I prepared the AD schema.

    Those articles were not helpful.  I have done quite a bit of searching on this today, and no real answers.  Those links you gave me have things marked as answers, but they're not really answers to any problem.

    Monday, March 26, 2012 9:22 PM
  • Hi

       1. It is DC problem.

          Set-exchangeserver -id server –StaticDomainControllers

         Meanwhile, Please run the Exchange setup.com on the DC server

         
    Setup /pd

       2. You can ran command:

        
    get-mailbox “guid”

        Does this mailbox point to a user showing in the GAL?

        Can you find user in the GAL? GAL doesn’t get update due to AD replication will cause this kind of problem

        3. User permission problem.

         You can set permission “everyone”group and test it again. If it is permission problem, you have to compare permission
    of this user with permission of other user and modify value.

       TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com

    Terence Yu

    TechNet Community Support

    Tuesday, March 27, 2012 2:25 AM
  • 1. This site has 3 DC/GC in it. Which one would I do that on?

    2. No, the user is not in the GAL (their mailbox was recently disabled and shows in the disconnected mailbox section)

    3. When you say user permission problem.  Are saying on the AD object?  I've compared, they all seem the same as they are inherited.

    A little more background... we 'cleaned up' about 200 accounts in our Exchange system.  Basically these were the accounts that some how slipped past our official processes.  By 'cleaned up', all I mean is that we disabled the mail features on the AD account.  Of the 200+ accounts disabled, 7 of them are showing up with these 9554 events now.  Once again, these event IDs are showing up for mailboxes that have been disconnected from their previous AD accounts.

    Tuesday, March 27, 2012 12:16 PM


  • Hi

       Thanks for your update.

       You had better the the ldp for good user and bad user.

       I believe that you will find attribute missing on bad user.

       Using Ldp.exe to Find Data in the Active Directory



    Terence Yu

    TechNet Community Support

    Wednesday, March 28, 2012 2:03 AM
  • I wound up doing this for all 8, and it cleared up the 9554 errors.

    First, I found all the users by the GUIDs:

    $mbstats = Get-MailboxStatistics -server exchangeserver
    $mbstats | ? { $_.MailboxGuid -eq '0f65b98c-de42-4a11-80c5-4a4e7e8c7a6c' } | fl

    I then re-enabled the user accounts and attached their old mailboxes back to them.

    Waited 30 minutes

    Disabled the mailboxes

    Waited 30 minutes

    Disabled the user accounts again.

    • Marked as answer by AR5 Wednesday, March 28, 2012 6:39 PM
    Wednesday, March 28, 2012 6:39 PM