Microsoft KB Archive/307273

= XGEN: Exchange 2000 Event ID 9551 Is Logged Incorrectly =

Article ID: 307273

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q307273





SYMPTOMS
An event ID 9551 that is generated by the information store may be logged incorrectly if a public folder contains a non-printable character or invalid Hypertext Transfer Protocol (HTTP) characters (for example, *, %, ^, and so on). The incorrect logging varies depending on the character that is used. The following is an example for a folder called *ACL_LOG_TEST:

Event Type: Warning

Event Source: MSExchangeIS Public Store

Event Category: General

Event ID: 9551

Description:

An error occurred while upgrading the ACL on folder [Public Folders]//O=MICROSOFT/OU=MATRIX/CN=TEST_PF/CN=PF_ACLAACL_LOG_TEST located on database &quot;First Storage Group\Public Folders&quot;. The Information Store was unable to convert the security for /O=MICROSOFT/OU=MATRIX/CN=TEST_PF/CN=PF_ACL into a Windows 2000 Security Identifier. It is possible that this is caused by latency in the Active Directory Service, if so, wait until the user record is replicated to the Active Directory and attempt to access the folder (it will be upgraded in place). If the specified object does NOT get replicated to the Active Directory, use the Microsoft Exchange System Manager or the Exchange Client to update the ACL on the folder manually. The access rights in the ACE for this DN were 0x41b.

Correct logging should appear as follows:

Event Type: Warning

Event Source: MSExchangeIS Public Store

Event Category: General

Event ID: 9551

Description: An error occurred while upgrading the ACL on folder [Public Folders]/%2AACL_LOG_TEST located on database &quot;First Storage Group\Public Folders&quot;. The Information Store was unable to convert the security for /O=MICROSOFT/OU=MATRIX/CN=TEST_PF/CN=PF_ACL into a Windows 2000 Security Identifier. It is possible that this is caused by latency in the Active Directory Service, if so, wait until the user record is replicated to the Active Directory and attempt to access the folder (it will be upgraded in place). If the specified object does NOT get replicated to the Active Directory, use the Microsoft Exchange System Manager or the Exchange Client to update the ACL on the folder manually. The access rights in the ACE for this DN were 0x41b.



CAUSE
This problem can occur because non-printable characters (invalid HTTP characters) are converted to valid ones. The information store converts these characters to % followed by the ASCII equivalent, so that the folders can be addressed by Uniform Resource Locator (URL). For example, a folder that is called *testfolder is converted to %2Atestfolder (2a is the ASCII equivalent of *). However, the Windows 2000 Event Viewer uses the %# sign as a delimiter when viewing events. Therefore, events that contain %# as &quot;arguments&quot; make the Event Viewer log incorrect.



WORKAROUND
To work around this problem, use valid HTTP characters to create folders.



STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.

Additional query words: exch2kp2w

Keywords: kbbug kberrmsg kbnofix KB307273

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.