Hi,This is our Exchange enviorment setup:(one) Exchange Server 2007 SP1 rollup 5. Running on a Windows Server 2003 R2 SP2.I don't really have any users reporting any problems regarding email. But looking in the Application Event Log I see alot of the following warnings: Event Type:WarningEvent Source:MSExchange Web ServicesEvent Category:Core Event ID:5Date:2009-02-27Time:19:57:49User:N/AComputer:MY-SERVERDescription:Unable to send a notification for subscription HQBhd3N0b3NydjA1LmFjYWRlbWljd29yay5sb2NhbBAAAACykwfyGuuJSIrp5cV7B8Ie. Will retry.and also someEvent Type:ErrorEvent Source:MSExchange Web ServicesEvent Category:Core Event ID:7Date:2009-02-27Time:19:48:45User:N/AComputer:MY-SERVERDescription:After 6 unsuccessful attempts to send a notification for subscription HQBhd3N0b3NydjA1LmFjYWRlbWljd29yay5sb2NhbBAAAADczwfjcr+2Ro5T0tq3t6bE, subscription has been removed.I don't find much info on this one out there. So i really hope you guys can help me figure out what might be causing this :)RegardsErik

Hi,Exchange Web Services doesn't impersonate the user when making the SendNotification request. Maybe it is the cause of your problem...The only way to solve this problem as far as I know is to support anonymous access to the web service (client-side)...Or modify application which uses Web Service to use pull notifications instead... Grgory Schiro - PowerShell and MOF - http://scriptingof.blogspot.com

Hi,Not sure I follow you Gregory :)Which user doesn'tExchange Web Servicesimpersonate? And when does Exchange need toimpersonate that user?We only haveone custom third party web application in the IIS on the Exchange server. Since it's not we who developed it I am not sure what kind of calls it makes. But what the application does is to sync meetings in the Outlook 2007 calendar with our management system for the phones.Does that sound like an application that could cause this kind of warnings?// Erik

Hi Erik, The event 5, 6, and 7 are basically event that telling us that a device/client is subscribing a server event, but when the server when to notify the client/device, the client is not there to respond to it, so the server threw and error and close the subscription. For your reference: http://social.technet.microsoft.com/Forums/en-US/exchangesvrdevelopment/thread/015cfdc6-8bde-4a78-93db-bb866a15f685/ Mike

Hi Mark, We are still not sure about the above events. Why we are seeing these alerts frequently in application logs. Can we ignore these alerts or need to do something to reslove this. Thanks. Regards, Sunil Bansal.

It seems for us to be an Iphone issue

We're having this same problem in our Exchange environment, and in our case, it seems to be originating from Alert subscriptions within Project Server. The alerts are actually coming through, however, and tasks and appointments are being created appropriately so impersonation is working, but Exchange is not receiving an ACK response on the subscription notifications, and thus continues retrying. I have also noticed a plethora of 401.2.2148074254 errors in the IIS logs. Any advice?

I'm having the same problem, seeing the same event posted above every couple of hours in the event log. But here's my question: is there a way to find out the source application that is generating the event? It's begining to look like push notification from my Exchange server, but I'd like to stop it since the website it is trying to connect to doesn't respond. I've posted this on the Exchange site with no solution yet. Is there a way to search on the long string of characters after the subscription in the event log message above? Is that the source that is generating the event?Steve