Exch 5.5 - Error 1023 Filling Up Event Log

Exch 5.5 - Error 1023 Filling Up Event Log

Post by Mohamed AlAlaw » Thu, 24 Oct 2002 18:21:52

I have Exchange 5.5 SP4 running on NT 4. I am running Mail Box Manager and
we have 2 Exchange Sites. The event log is filling up with error 1023 as

Event Type: Audit Failure
Event Source: MSExchangeIS Private
Event Category: Logons
Event ID: 1023

The service account used is has permissions admin. It is trying to access a
mailbox on the same server and not on any other servers. That is what
Microsoft is telling on Technet.

I still get this error even when I stopped the mailbox manager service.

Could anybody help?



1. Event ID 1023 - filling up application log

I have 3 Exchange 5.5 servers in my site. On 2 of them, the application
logs are full of entries for event ID 1023. The descriptions look like

CORPORATE\<admin account> was validated as
/o=<site>/ou=<organization>/cn=Recipients/CN=NAIGFNETSEESAR3 but was
unable to log on to
/O=<site>/OU=<organization>/CN=RECIPIENTS/CN=<deleted mailbox>.

I've looked thru every document and posting regarding this event ID that
I can find, and the closest relevant thing I've found is Q259578 in the
Microsoft Knowledgebase. However, when I started following the
instructions in that article for useing MDBVU32.EXE to clear references
to the deleted mailbox, I'm not finding any references to the deleted


Rachel A. Milbrand
PC/Internet/Email Support Specialist

2. Add-ins - auto-zip and auto-forward retaining sender

3. Error in Application Event Log. Event ID 1023

4. Exchange the users-calendar between two different Exchange organisations ???

5. Exch 5.5 SP3 Event ID:1023

6. beta: -ERR The requested message is no longer available; it may have been deleted

7. Event ID 1023 in Event Log

8. default GAL has gone in exchange admin view

9. Event ID 1023 in event logs

10. Error with Event ID: 1023,Event Source: POP3SVC

11. POP3SVC Event 1023 Error 0x7da

12. Event ID 1023 Failure Audit Errors

13. POP3SVC Event ID 1023 error 0x7d6