event ID 17 and 2937 are happening on a Consecutive way

On exchange 2010 mail box server these events are happening every 4 hours exactly.

First event 17 happens three times:

(Process w3wp.exe, PID 7052) "RBAC authorization returns Access Denied for user domain.local/serversou/MBXserver01. Reason: No role assignments associated with the specified user were found on Domain Controller AD1.domain.local"

then immediately it is followed by warning 2937 for two times:

Process MONAD.EXE () (PID=5092). Object [CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local]. Property [GlobalAddressList] is set to value [domain.local/Configuration/Deleted Objects/Default Global Address List
DEL:5ace3c0a-7992-4ad7-9f1b-a6f44eb115de], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

August 29th, 2015 10:00am

My suggestion is to use ADSI Edit to look at that property for that object specified in the message and change it to the DN of a valid global address list.
Free Windows Admin Tool Kit Click here and download it now
August 29th, 2015 11:04pm

Hi,

Step1: Get the current distinguished name of GAL.
Go to ADSIEdit -> DC=domain,DC=local -> CN=Configuration -> CN=Services -> CN=Microsoft Exchange -> CN=Organization Name -> CN=Address Lists Container -> CN=All Global Address Lists -> CN=Default Global Address List
Double click on this object, copy the value of the attribute distinguishedname

Step2: Configure the property
Go to ADSIEdit, find Object [CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local]
Double click on this object, and choose the GlobalAddressList attribute. Paste the value we get in the Step1.

For event 17, refer to this blog.

http://blogs.technet.com/b/eileenor/archive/2011/04/19/msexchange-rbac-error-17.aspx

Best Regards.
August 31st, 2015 3:27am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics