Exchange 2007 Event ID 16022 and 16002 Help Needed

Exchange 2007 Enterprise Sp3 64 Bit
Wndows 2003 R2 Standard 64 bit server

Getting these messages every so many hours

Type :            Information
Date :            9/22/2013
Time :            12:44:09 PM
Event :            16022
Source :            MSExchangeTransport
Category :      Configuration
User :            N/A
Computer :      SERVS005
Description:
The description for Event ID ( 16022 ) in Source ( MSExchangeTransport ) could not be found. It contains the following insertion string(s): .

Type :            Information
Date :            9/22/2013
Time :            12:44:09 PM
Event :            16022
Source :            MSExchangeTransport
Category :      Configuration
User :            N/A
Computer :      SERV005
Description:
The description for Event ID ( 16022 ) in Source ( MSExchangeTransport ) could not be found. It contains the following insertion string(s): .

Type :            Information
Date :            9/22/2013
Time :            12:44:09 PM
Event :            16022
Source :            MSExchangeTransport
Category :      Configuration
User :            N/A
Computer :      SERV005
Description:
The description for Event ID ( 16022 ) in Source ( MSExchangeTransport ) could not be found. It contains the following insertion string(s): .

Type :            Information
Date :            9/22/2013
Time :            12:44:09 PM
Event :            16002
Source :            MSExchangeTransport
Category :      Configuration
User :            N/A
Computer :      SERV005
Description:
The description for Event ID ( 16002 ) in Source ( MSExchangeTransport ) could not be found. It contains the following insertion string(s): .



No indication what is missing?

I was getting this before
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_28239819.html

Thats another question I have posted.

My searching only found hits on POP3 I do not run POP3 also windows 2008 Server and exchange 2007 issues my server is 2003

Thanks in advance.
LVL 23
Thomas GrassiSystems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Patrick BogersDatacenter platform engineer LindowsCommented:
Hi,

i dont understand what are you looking for?!

Type : Information (is not alert or error) It is telling you the config has changed.
0
Thomas GrassiSystems AdministratorAuthor Commented:
My understanding is ( MSExchangeTransport ) could not be found

What could not be found?

Not a message that says it has changed.
0
Patrick BogersDatacenter platform engineer LindowsCommented:
Probably some software (anti-virus, anti-spam) is updating the config.
If you want to go to the bottom off this please open powershell and enter:

Get-TransportAgent

Please post the output here again.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

Thomas GrassiSystems AdministratorAuthor Commented:
[PS] C:\>get-transportagent

Identity                                           Enabled         Priority
--------                                           -------         --------
Transport Rule Agent                               True            1
Journaling Agent                                   True            2
AD RMS Prelicensing Agent                          False           3
Connection Filtering Agent                         True            4
Content Filter Agent                               True            5
Sender Id Agent                                    True            6
Sender Filter Agent                                True            7
Recipient Filter Agent                             True            8
Protocol Analysis Agent                            True            9
0
Patrick BogersDatacenter platform engineer LindowsCommented:
cool

When you now do a  Get-TransportAgent | Disable-TransportAgent    all transport agents are disabled.

Next you restart the Microsoft Exchange Transport service and look at the eventlogs, if all is well the informational entries are stopped.

Now comes the patience part.
One by one we start the transport agents. After every agent restart the Microsoft Exchange Transport service and look if the transport service stays stable.

You enable the transport agents with  

Enable-TransportAgent -Identity “transportagent name"

Once you found the agent that is making the entries you can use Disable-TransportAgent -identity “transportagentname” to disable on this transport agent again and start digging in what software is associated with this agent.

Once found, uninstall the software and if necessary install the latest version of it.

HTH
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas GrassiSystems AdministratorAuthor Commented:
HTH

Thanks for the info

This is a production email server will do Get-TransportAgent | Disable-TransportAgent    
Will email stop flowing in and out?

If so I will have to schedule this
0
Thomas GrassiSystems AdministratorAuthor Commented:
Thanks guys.

So what we are saying is that the 16002 and 16022 messages are only posted when the exchange transport is updated.

The articles above I did not find a resolution in them. Did I miss something?

My only concern is that they have the for a description
The description for Event ID ( 16002 ) in Source ( MSExchangeTransport ) could not be found. It contains the following insertion string(s): .

This is very misleading just an informational message but the seems this is an error.

I saw in one article that several attempted to disable the transport agents and then add them back in.

All reported this made no difference.

Where do we go from here?

Thanks again for all your help.
0
Patrick BogersDatacenter platform engineer LindowsCommented:
If this is not the way which helps you get answers open a ticket with MS. (willing to bet kudoos they will have you shut down all the agents and add them 1 by 1)
0
Thomas GrassiSystems AdministratorAuthor Commented:
HTH

Thanks I will give it a try.

I asked a question above.

This is a production email server when I do the
Get-TransportAgent | Disable-TransportAgent    
Will email stop flowing in and out?

Thanks
0
Patrick BogersDatacenter platform engineer LindowsCommented:
Hi again,

Sorry, missed that question. YES you will interupt exchange services for quiet some time because every time a agent is added and the Microsoft Exchange Transport service restart you need to give it time to make sure it is stable.

But if you want my honest opinion, i believe it is normal behaviour for this informational entries to occur a few times a day. (not every 5 seconds of course)
0
Thomas GrassiSystems AdministratorAuthor Commented:
Thanks HTH

I will schedule this as soon as I can.
0
Patrick BogersDatacenter platform engineer LindowsCommented:
Take your time, we wont go anywhere :)

Good luck to you.
0
Thomas GrassiSystems AdministratorAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for trgrassijr55's comment #a39513328

for the following reason:

This was helpful but did not solve the issue.

the transportconfig was missing smtp entries it was emprty

I issued this command

set-transportconfig -internalsmtpservers 192.168.1.26,192.168.1.27

once that was excepted the 16022 1nd 16002 messages now are showing valid information

thanks
0
Thomas GrassiSystems AdministratorAuthor Commented:
i guess the points did not go thru
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.