In an Exchange2013 CU2 environment with 4 mailbox servers (2 each in a different site) and separate front end servers (also 2 each in a different site) I find the application evenlogs on mailbox servers littered (500 events per 24 hours) with Event ID: 1309,
Event Source: ASP.NET. With common underlying exeptions "MapiExceptionMailboxInTransit" and "MapiExceptionIllegalCrossServerConnection"
The errors seem to be caused by attempts to login to
https://localhost:444/owa/proxylogon.owa using the userID of a Health monitoring mailbox that is actively mounted on a different mailboxserver.
I theorize that this to be a bug in the Exchange Health manager (not keeping track of where mailboxes are actively mounted) but can't say that for sure.
Any suggestion on how to "turn off" this check in the health manager configuration so I don't get all these false positive messages ?
Examples of message below --------------------------
Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 8/5/2013 9:55:45 AM
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: den-s-mbx4.mydomain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 8/5/2013 9:55:45 AM
Event time (UTC): 8/5/2013 3:55:45 PM
Event ID: ec427c24c3d74b3d80c99d8e8612c8f1
Event sequence: 79334
Event occurrence: 11067
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/2/ROOT/owa-1-130188945774437279
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\
Machine name: DEN-S-MBX4
Process information:
Process ID: 18388
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: MapiExceptionMailboxInTransit
Exception message: MapiExceptionMailboxInTransit: DatabaseLocationProvider detected site violation (hr=0x0, ec=1292)
Request information:
Request URL:
https://localhost:444/owa/proxylogon.owa
Request path: /owa/proxylogon.owa
User host address: 127.0.0.1
User: MYDOMAIN\SM_4275121dabc948258
Is authenticated: True
Authentication Type: Kerberos
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 49
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace:
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 4.0.30319.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-08-05T15:55:45.000000000Z" />
<EventRecordID>6270698</EventRecordID>
<Channel>Application</Channel>
<Computer>den-s-mbx4.mydomain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>8/5/2013 9:55:45 AM</Data>
<Data>8/5/2013 3:55:45 PM</Data>
<Data>ec427c24c3d74b3d80c99d8e8612c8f1</Data>
<Data>79334</Data>
<Data>11067</Data>
<Data>0</Data>
<Data>/LM/W3SVC/2/ROOT/owa-1-130188945774437279</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\</Data>
<Data>DEN-S-MBX4</Data>
<Data>
</Data>
<Data>18388</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>MapiExceptionMailboxInTransit</Data>
<Data>MapiExceptionMailboxInTransit: DatabaseLocationProvider detected site violation (hr=0x0, ec=1292)
</Data>
<Data>https://localhost:444/owa/proxylogon.owa</Data>
<Data>/owa/proxylogon.owa</Data>
<Data>127.0.0.1</Data>
<Data>MYDOMAIN\SM_4275121dabc948258</Data>
<Data>True</Data>
<Data>Kerberos</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>49</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data>
</Data>
</EventData>
</Event>
----------------------------------
Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 8/5/2013 12:08:32 PM
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: wal-vm-mbx1.mydomain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 8/5/2013 12:08:32 PM
Event time (UTC): 8/5/2013 4:08:32 PM
Event ID: 77d613a2c42344348fd215f4ad092708
Event sequence: 325843
Event occurrence: 7098
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/3/ROOT/owa-1-130191699398831006
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\
Machine name: WAL-VM-MBX1
Process information:
Process ID: 31516
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: MapiExceptionIllegalCrossServerConnection
Exception message: MapiExceptionIllegalCrossServerConnection: Monitoring mailbox [] with application ID [Client=OWA;Action=ViaProxy] is not allowed to make cross-server calls to [wal-s-mbx2.mydomain.com]
at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag
storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
Request information:
Request URL:
https://localhost:444/owa/proxylogon.owa
Request path: /owa/proxylogon.owa
User host address: ::1
User: MYDOMAIN\SM_9d047d8145014f31b
Is authenticated: True
Authentication Type: Kerberos
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 41
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag
storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 4.0.30319.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-08-05T16:08:32.000000000Z" />
<EventRecordID>1841325</EventRecordID>
<Channel>Application</Channel>
<Computer>wal-vm-mbx1.mydomain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>8/5/2013 12:08:32 PM</Data>
<Data>8/5/2013 4:08:32 PM</Data>
<Data>77d613a2c42344348fd215f4ad092708</Data>
<Data>325843</Data>
<Data>7098</Data>
<Data>0</Data>
<Data>/LM/W3SVC/3/ROOT/owa-1-130191699398831006</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\</Data>
<Data>WAL-VM-MBX1</Data>
<Data>
</Data>
<Data>31516</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>MapiExceptionIllegalCrossServerConnection</Data>
<Data>MapiExceptionIllegalCrossServerConnection: Monitoring mailbox [] with application ID [Client=OWA;Action=ViaProxy] is not allowed to make cross-server calls to [wal-s-mbx2.mydomain.com]
at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag
storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
</Data>
<Data>https://localhost:444/owa/proxylogon.owa</Data>
<Data>/owa/proxylogon.owa</Data>
<Data>::1</Data>
<Data>MYDOMAIN\SM_9d047d8145014f31b</Data>
<Data>True</Data>
<Data>Kerberos</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>41</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data> at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag
storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
</Data>
</EventData>
</Event>