Exchange 2007 SP1 Rollup 10, Single Server. Application Log Warning We have been receiving a warning message that I would like to track to a source message. Event Type: Warning Event Source: MSExchangeIS Mailbox Store Event Category: Background Cleanup Event ID: 9805 Date: 8/17/2011 Time: 4:15:00 AM User: N/A Computer: LSS003 Description: Cleanup of the DeliveredTo table for database 'Third Storage Group\Executive Database' detected an entry with an invalid submission time. However, the message delivery time appeared valid, so the entry will not be removed until it expires normally. Submission Time: 10/8/2011 12:00:15 PM GMT (0x00000000d7047180) Delivery Time: 8/10/2011 4:47:22 PM GMT (0x000000002d12d10d) Root Folder ID: 4-6500D17 Message Instance ID: 1-12AE35D2B For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I can't seem to figure our how to determine the message since searching against the delivery time hasn't led to an exact correlated message, and the Message Instance ID doesn't seem to match the Message ID in Message Tracking nor does the Root Folder ID seem to be found. I don't think the errors are causing an issue, but I would like to determine hte source (i.e., a poorly written code from a mail enabled application) to see if it is something easily correct. The closest I get is messages from System Mailbox with a subject of Test Message (followed by a rather long GUID), but there seem to be far more of those than the number of Warning entries that I am receiving. Thanks for your help. Jim@Work

On Wed, 17 Aug 2011 16:53:09 +0000, Jim_Work wrote: >Exchange 2007 SP1 Rollup 10, Single Server. > >Application Log Warning > >We have been receiving a warning message that I would like to track to a source message. > >Event Type: Warning Event Source: MSExchangeIS Mailbox Store Event Category: Background Cleanup Event ID: 9805 Date: 8/17/2011 Time: 4:15:00 AM User: N/A Computer: LSS003 Description: Cleanup of the DeliveredTo table for database 'Third Storage Group\Executive Database' detected an entry with an invalid submission time. However, the message delivery time appeared valid, so the entry will not be removed until it expires normally. > > Submission Time: 10/8/2011 12:00:15 PM GMT (0x00000000d7047180) Delivery Time: 8/10/2011 4:47:22 PM GMT (0x000000002d12d10d) Root Folder ID: 4-6500D17 Message Instance ID: 1-12AE35D2B > >For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. > >I can't seem to figure our how to determine the message since searching against the delivery time hasn't led to an exact correlated message, and the Message Instance ID doesn't seem to match the Message ID in Message Tracking nor does the Root Folder ID seem to be found. I don't think the errors are causing an issue, but I would like to determine hte source (i.e., a poorly written code from a mail enabled application) to see if it is something easily correct. The closest I get is messages from System Mailbox with a subject of Test Message (followed by a rather long GUID), but there seem to be far more of those than the number of Warning entries that I am receiving. To get a dump of the information in the database you'd have to run isinteg with the "-dump" option. That would get you the mailbox ids, folder-ids, etc. I don't know that it would dump the contents of the DeliveredTo table, though. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Thanks for your response. I was able to stumble across the actual message. Otherwise, I don't think it would be worth doing a dumb to learn te root folder ID and corresponding mailbox. Thanks!