amset

.info
.co.uk - exchange consultancy
.net - internet based solutions
Have your Exchange server installed, maintained or
upgraded by Amset IT Solutions.
Exchange 2000, 2003, 2003 SBS, 2007
More Information (UK only)

Broadband - Exchange
Login Scripts - Net Admin
Outlook - Windows Mobile
Windows

Contact - Advertise

AddThis Social Bookmark Button

Exchange Server

Exchange Consultancy


Amazon Store


Basic Email Gateway Server

Company wide Contact List

Disabled User Account

Distribution Lists

DNS Configuration

Exchange and a
Dynamic IP Address

Event ID 1221

Filter Unknown Users

Global Mailbox Folder
Permissions from Server

Intelligent Message Filter

Internal Email Address
for External People

Internet Tools

Mailbox and Management
Account

Message Tracking

Migrating to a new server

Multiple Domains

Offline Address Book Errors

Options when a Staff Member
Leaves

Outlook Web Access

PDAs, OMA and EAS

Permissions Best Practises

Post Install Configuration

Public Folders

Prerequisites for Exchange
System Tools

RPC over HTTPS

Secure your SMTP Relay

Shutdown Script

SMTP Services and Exchange

SMTP Diagnostics

Spam Cleanup

Switching From POP3
to SMTP Delivery

Telnet Test

Tools for Admin of
Exchange Server

Username Change

Exchange Server
Compatibility Information
Exchange
Server Version
Compatibility
5.5 No
2000 Yes
2003 Yes
2007 Maybe
Error Log Entries 1022 and 9548 With Disabled Accounts

Author: Simon Butler, Exchange MVP, MCSE
Last Page Review: 09/03/2008

A user leaves the company and you disable the account.
Your event log then starts filling up with errors like this:

Event Type: Error
Event Source: MSExchangeIS Mailbox Store
Event Category: Logons
Event ID: 1022
Date: 04/11/2004
Time: 05:15:50
User: N/A
Computer: MAIL-SERVER
Description:
Logon Failure on database "First Storage Group\Mailbox Store
(MAIL-SERVER)" - Windows 2000 account NT AUTHORITY\SYSTEM; mailbox
/O=Company plc/OU=COMPANY/cn=Recipients/cn=usera.
Error: -2147221231

For more information, click
http://www.microsoft.com/contentredirect.asp.

Event Type: Warning
Event Source: MSExchangeIS
Event Category: General
Event ID: 9548
Date: 04/11/2004
Time: 05:15:50
User: N/A
Computer: MAIL-SERVER
Description:
Disabled user /O=Company plc/OU=COMPANY/cn=Recipients/cn=usera does not
have a master account SID. Please use Active Directory MMC to set an
active account as this user's master account.

For more information, click
http://www.microsoft.com/contentredirect.asp.
 

You want to remove the error message from the system, yet still retain the account.
There is a simple fix.

  1. Go in to the Mailbox Rights of the user account. You will find this in ADUC, Right click on the user account and choose Properties. Select the "Exchange Advanced" tab and then "Mailbox Rights".
  2. Listed in the users will be one called "Self", which should already have "Full Mailbox Access" rights. Enable "Associated External Account" as well.
  3. Apply/OK out.

Note: You can only have one "Associated External Account" per user, so if another account has already been given that setting, it will need to be removed.

Another option would be to not disable the account, but change the password, hide the user account and remove the permissions. You can stop the account being used by enabling the option to require a password change and the use of a "Access Denied" group.


Related Articles

Options When a Staff Member Leaves

Sponsored Links

Last Page Update:
09/03/2008

Back to the Top
Contact Us - Advertise on amset.info
Exchange Index - Home Page


Broadband - Exchange - Login Scripts - Network Admin - Outlook - Windows Mobile - Windows


© Amset IT Solutions Ltd. 1998 - 2008. All rights reserved. Reproduction of any content on this web site is prohibited without express written consent. Use of this web site is subject to our terms and conditions. All trademarks and registered trademarks are property of their respective owners. This site is not endorsed or recommended by any company or organisation mentioned on this site. This site is to provide guidance only and as such we cannot be held responsible for any consequences of following the advice given.