MSExchangeIS 9548 Error

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jon G (jgarlock_at_jhcohn.com)
Date: 10/05/04 

Date: Tue, 5 Oct 2004 10:02:37 -0400

The text of the event log error:

Event Type: Warning
Event Source: MSExchangeIS
Event Category: General
Event ID: 9548
Date: 10/5/2004
Time: 9:54:14 AM
User: N/A
Computer: RL-MAIL01
Description:
Disabled user /o=BLAH/ou=BLAH/cn=RECIPIENTS/cn=AUSER does not have a master
account SID. Please use Active Directory MMC to set an active account as
this user's master account.

------------

We have a number of disabled accounts in our directory. These disabled
accounts do nothing more than "hold email addresses". This is going to take
some explaining :)

We have users that are technically not employees. They cannot login to our
domain. Their accounts are disabled. The accounts exist solely so that
user has an email address in our organization. The advanced properties for
these disabled users have the email forwarding off to a contact with an
external email address. Yay.

However, a number of the disabled users generate the above errors in our
event logs. They pop up every few minutes. Try combing through our event
logs for "real problems" while sifting through this stuff. Not fun.

Anybody ever seen this? We cannot figure out why some users cause this
problem and others do not.

Thanks,
Jon.

Relevant Pages

  • Re: EcSetRulesSyncError?
    ... > Event Source: MSExchangeIS Mailbox Store ... > An error occurred on database "Disabled Accounts Storage Group\Disabled ... Blitzing all rules in folder 2-1C94FB7 because of rules sync> error ... >> When referring to an event log entry always post the entire event log ...
    (microsoft.public.exchange.misc)
  • Re: Being hacked...
    ... nor have the attacks dimminished. ... I have the accounts locked out forever ... I've installed an event log analyzer to help with event log ... Looking at your firewall logs might help as well, ...
    (microsoft.public.win2000.security)
  • Cant start Active Directory Users and Computers
    ... "Naming information cannot be located because:" ... "Contact your system administrator to verify that your ... this is all from the application event log ... everyones accounts had been locked out. ...
    (microsoft.public.win2000.security)
  • Re: Cant start Active Directory Users and Computers
    ... > When I double click the icon I get the following error ... > "Contact your system administrator to verify that your ... > this is all from the application event log ... > everyones accounts had been locked out. ...
    (microsoft.public.win2000.security)
  • Re: Users accounts locking for no apparent reason
    ... Check the event log on your DC, maybe someone is trying to brute-force ... > AD and unlocking various accounts! ... > password, I've re-set it, but still within about 5 minutes ... > expire this starts. ...
    (microsoft.public.exchange2000.admin)