Microsoft KB Archive/152624

= XADM: Err Msg: Event IDs 9297 and 3161 =

Article ID: 152624

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition
 * Microsoft BackOffice Small Business Server 4.5

-



This article was previously published under Q152624



SUMMARY
The following Event IDs are logged in the Windows NT Event Viewer application log if the account listed on the Override tab of the Site Connector in the Microsoft Exchange Administrator program does not have Service Account Admin rights on the Configuration and Site containers.

Note: This behavior can also occur by having the wrong password in the startup parameters for the message transfer agent (MTA) service.

Application log:

Event id: 9297 Source = MS Exchange MTA

The user /o=ORGanization /ou=SITE1 /cn=Configuration /cn=Servers /cn=SERVER1 /cn=Microsoft Private MDB has caused a security violation. Locality table (LTAB) index: 5. Windows NT error code: 0. [BASE IL MAIN BASE 1 237] (14)

Event id: 3161 Source = MS Exchange MTA

An internal MTA error occurred. The logon violated security. Entity name:. Error code: 0. [XAPI MAIN BASE 1 92] (14)

NOTE: Always use the Small Business Server Console to make changes to user accounts as the User Manager for Domains does not update linked modules in Small Business Server 4.5. The use of User Manager for Domains in a Small Business Server 4.5 Environment may result in this error.



MORE INFORMATION
To resolve this, give the account on the Override tab Service Account Admin Permissions on the Configuration and Site containers
 * 1) Click the Site Connector, and on the File menu, click Properties. Note the Windows NT account that is specified on the Override tab, and close the Site Connector Properties page.
 * 2) Click the Configuration container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions.
 * 3) Click the Site container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions.

NOTE: Missing permissions can also prevent the Message Transfer Agent from transferring mail to its own local information store.

Additional query words: awaiting delivery

Keywords: kbhowto kbusage KB152624

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.