1. This site has 3 DC/GC in it. Which one would I do that on? 2. No, the user is not in the GAL (their mailbox was recently disabled and shows in the disconnected mailbox section) 3. When you say user permission problem. Are saying on the AD object? I've compared, they all seem the same as they are inherited. A little more background... we 'cleaned up' about 200 accounts in our Exchange system. Basically these were the accounts that some how slipped past our official processes. By 'cleaned up', all I mean is that we disabled the mail features on the AD account. Of the 200+ accounts disabled, 7 of them are showing up with these 9554 events now. Once again, these event IDs are showing up for mailboxes that have been disconnected from their previous AD accounts.

I've found the user object, and I've seen articles that say to make sure that the allow inherited permissions to propagate is checked, but that option is already checked on this user object. In this particular case, this is a disabled user with a recently disconnected mailbox. Exchange 2007 SP3. Thoughts?

I wound up doing this for all 8, and it cleared up the 9554 errors. First, I found all the users by the GUIDs: $mbstats = Get-MailboxStatistics -server exchangeserver $mbstats | ? { $_.MailboxGuid -eq '0f65b98c-de42-4a11-80c5-4a4e7e8c7a6c' } | fl I then re-enabled the user accounts and attached their old mailboxes back to them. Waited 30 minutes Disabled the mailboxes Waited 30 minutes Disabled the user accounts again.

Hi, Sorry. Did you prepare the AD schema before installing the SP3 for Exchange 2007? If no, run the Setup /PrepareAD command. And view the links below, http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/484cd84f-f94a-422c-8b31-603c3c80ff67 http://social.technet.microsoft.com/Forums/en/exchangesvradmin/thread/35c07d4b-8ff0-42f7-bc86-627877330d50 Hope, these will helpful. MCTS: Microsoft Exchange Server 2007/2010 | MCSA

Yes I prepared the AD schema. Those articles were not helpful. I have done quite a bit of searching on this today, and no real answers. Those links you gave me have things marked as answers, but they're not really answers to any problem.

Hi Thanks for your update. You had better the the ldp for good user and bad user. I believe that you will find attribute missing on bad user. Using Ldp.exe to Find Data in the Active Directory Terence Yu TechNet Community Support

Hi 1. It is DC problem. Set-exchangeserver -id server StaticDomainControllers Meanwhile, Please run the Exchange setup.com on the DC server Setup /pd 2. You can ran command: get-mailbox guid Does this mailbox point to a user showing in the GAL? Can you find user in the GAL? GAL doesnt get update due to AD replication will cause this kind of problem 3. User permission problem. You can set permission everyonegroup and test it again. If it is permission problem, you have to compare permission of this user with permission of other user and modify value. TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comTerence Yu TechNet Community Support