locked
Exchange 2003 ExchangeAL 8270 event RRS feed

  • Question

  • System Application event log fills with Source MSExchangeAL, Category LDAP Operations, Event ID 8270.

    THis is an Exchange 2003 SP2 running on Windows 2003 Server

    The error states:

    LDAP returned the error [10] No such Attribute when importing the transaction dn: GUID xxxx

    Changetype: Modify

    msExchPoliciesIncluded: delete:{xxxxxxxx.......}

    msExchaPoliciesInclded: Add {xxxxxx........}

    msExchanALObjectVersion:6379

    objectGUID:xxxxxxxxxxxxxxxxx

    This error message comes in various numbers every 8 to 12 minutes.

    Email is functioning with remote sites. I wouldn't have known there was an error if I didn't happen to check the applicaton log.

    I've tried to remove the LDAP communications with my local DC and then add them back on on the "directory services" tab of the server with no change in the error. No other sites are experiencing this problem.

    Any idea on what Exchange/AD are trying to tell me here? There are no errors on the AD DC server.

    Monday, March 26, 2012 9:59 PM

Answers

  • Rerunning /domainprep is a good idea.

    Please also run the Exbpa to do a Health & Permission Check.

    Microsoft Exchange Best Practices Analyzer v2.8

    http://www.microsoft.com/download/en/details.aspx?id=22485

    If you create a new mailbox, will the E-mail address be stamped on the user?

    Please check the settings as following KB said:

    Missing permissions cause the Recipient Update Service not to process accounts in Exchange 2000 Server and Exchange Server 2003

    http://support.microsoft.com/kb/254030

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Frank Wang

    TechNet Community Support

    • Proposed as answer by emma.yoyo Monday, April 2, 2012 2:03 AM
    • Marked as answer by Terence Yu Tuesday, April 3, 2012 6:52 AM
    Wednesday, March 28, 2012 7:53 AM

All replies

  • On Mon, 26 Mar 2012 21:59:54 +0000, eallen38 wrote:
     
    >
    >
    >System Application event log fills with Source MSExchangeAL, Category LDAP Operations, Event ID 8270.
    >
    >THis is an Exchange 2003 SP2 running on Windows 2003 Server
    >
    >The error states:
    >
    >LDAP returned the error [10] No such Attribute when importing the transaction dn: GUID xxxx
    >
    >Changetype: Modify
    >
    >msExchPoliciesIncluded: delete:{xxxxxxxx.......}
    >
    >msExchaPoliciesInclded: Add {xxxxxx........}
    >
    >msExchanALObjectVersion:6379
    >
    >objectGUID:xxxxxxxxxxxxxxxxx
    >
    >This error message comes in various numbers every 8 to 12 minutes.
    >
    >Email is functioning with remote sites. I wouldn't have known there was an error if I didn't happen to check the applicaton log.
    >
    >I've tried to remove the LDAP communications with my local DC and then add them back on on the "directory services" tab of the server with no change in the error. No other sites are experiencing this problem.
    >
    >Any idea on what Exchange/AD are trying to tell me here? There are no errors on the AD DC server.
     
    Is the objectGUID identifying a mail-enabled object in the AD? Is it
    always the same GUID?
     
    You could try getting all the Exchange properties that are unique to
    this user (custom attributes, and any additional proxy addresses, for
    example) and then use the ADUC to remove the Exchange attributes from
    the user. Then wait a few minutes and then run the cleanup agent on
    the database. When the mailbox shows up as "disconnected", reconnect
    the mailbox to the user object. When that's done you can use the ADUC
    and ESM to put back any properties that were not restored when you
    reconnected the mailbox.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Tuesday, March 27, 2012 2:26 AM
  • I've compared the GUIDs in the messages. We have addresses from I'm numerous Exchange servers that end up sharing user address information and so far only my location is reporting this error in the Application log. I believe that the day it started was a day that we went off the air, meaning our DC and our EX were not connected to the forest for 24hours or so.
    I dug further on the GUIDs. I have a total of 2053 different GUIDs that appear in the event log over approximately 7hrs looking like this -

    The description for Enent ID (8270) in Source (MSExchangeAL) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description; see Help and Support for details. The following information is part of the event:

    10, No Such Attribute

    dn:<GUID=621...............>

    changetype:Modify

    msExchPoliciesIncluded:delete:{52D........},{264.........}

    msExchPoliciesIncluded:add:{3A7........},{264.........}

    msExchALObjectVersion:5082

    ObjectGUID: (same as dn:)

    Any ideas? No punting or kicking allowed.

    • Edited by eallen38 Tuesday, March 27, 2012 12:53 PM
    Tuesday, March 27, 2012 12:08 PM
  • On Tue, 27 Mar 2012 12:08:24 +0000, eallen38 wrote:
     
    >I've compared the GUIDs in the messages. We have addresses from I'm numerous Exchange servers that end up sharing user address information and so far only my location is reporting this error in the Application log. I believe that the day it started was a day that we went off the air, meaning our DC and our EX were not connected to the forest for 24hours or so. I dug further on the GUIDs. I have a total of 2053 different GUIDs that appear in the event log over approximately 7hrs looking like this -
     
    Consider rerunning /domainprep in that domain.
     
    If you look at one of the AD objects identfied by a GUID with ADSIEDIT
    (or LDP), do you see those properties on the object? When you check
    the permissions on the object is inheritence blocked?
     
     
     
    >
    >The description for Enent ID (8270) in Source (MSExchangeAL) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description; see Help and Support for details. The following information is part of the event:
    >
    >10, No Such Attribute
    >
    >dn:<GUID=621...............>
    >
    >changetype:Modify
    >
    >msExchPoliciesIncluded:delete:{52D........},{264.........}
    >
    >msExchPoliciesIncluded:add:{3A7........},{264.........}
    >
    >msExchALObjectVersion:5082
    >
    >ObjectGUID: (same as dn:)
    >
    >Any ideas? No punting or kicking allowed.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Tuesday, March 27, 2012 9:19 PM
  • Rerunning /domainprep is a good idea.

    Please also run the Exbpa to do a Health & Permission Check.

    Microsoft Exchange Best Practices Analyzer v2.8

    http://www.microsoft.com/download/en/details.aspx?id=22485

    If you create a new mailbox, will the E-mail address be stamped on the user?

    Please check the settings as following KB said:

    Missing permissions cause the Recipient Update Service not to process accounts in Exchange 2000 Server and Exchange Server 2003

    http://support.microsoft.com/kb/254030

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Frank Wang

    TechNet Community Support

    • Proposed as answer by emma.yoyo Monday, April 2, 2012 2:03 AM
    • Marked as answer by Terence Yu Tuesday, April 3, 2012 6:52 AM
    Wednesday, March 28, 2012 7:53 AM
  • Hi eallen38,

    Any updates?


    Frank Wang

    TechNet Community Support

    Friday, March 30, 2012 1:43 AM