Solved

After migration from Ex2007 to Ex2013 SP1 - mailbox delegation settings: Warning "The object mydomain.com/TestUser1 has been corrupted, and it's in an inconsistent state"

Posted on 2014-04-23
4
4,089 Views
Last Modified: 2014-04-30
Few users were successfully migrated from Exchange 2007 to Exchange 2013 SP1 server. However, migration for some users failed with error message: “Error: This mailbox exceeded the maximum number of corrupted items that were specified for this move request.”

Trying to resume failed migration batch within exchange admin center is producing the same error.

After some Googling around I have found this article “Corrupted Items and Mailbox Moves in Exchange 2010” (http://windowsitpro.com/exchange-server-2010/corrupted-items-and-mailbox-moves-exchange-2010)

I’m guessing that information in this article is quite relevant to the Exchange 2013 SP1 as well.

Base on the information from the article I’m trying to run following PowerShell command:

Get-MoveRequest -Identity "TestUser1" | Set-MoveRequest -BadItemLimit 20 | Resume-MoveRequest

Output from the command in exchange management shell doesn’t really tells me anything except yellow color warning about possibility of losing some items during the move because of BadItemLimit.

After a while I have noticed that failed status have changed to completed and the mailbox is in correct target database.

Checking properties for the freshly migrated “TestUser1” within Exchange Admin Center looks good so far except for the ‘mailbox delegation’ settings. When I click on it gives me scary warning:

Warning
The object mydomain.com/HR/Admin/TestUser1 has been corrupted, and it's in an inconsistent state. The following validation errors happened:
--------------------------------------------------------------------------------
The access control entry defines the ObjectType 'd819615a-3b9b-4738-b47e-f1bd8ee3aea4' that can't be resolved..
--------------------------------------------------------------------------------
The access control entry defines the ObjectType 'e2d6986b-2c7f-4cda-9851-d5b5f3fb6706' that can't be resolved..
--------------------------------------------------------------------------------
The access control entry defines the ObjectType '9b51a1ef-79b7-4ae5-9ac8-d14c47daca46' that can't be resolved..

What is this?! The word “corrupted” gives me shivers. How do I fix this? If I have too, I can delete this mailbox on Ex2013 and recover it from the backup back to the Ex2007 server but I’m hoping for the easy fix solution if possible.

Thanks in advance
0
Comment
Question by:Olevo
  • 3
4 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
Comment Utility
"Corrupted" means Exchange cannot read it.
In most cases this isn't a problem with the mailbox, but the Active Directory account.
Look at the account in ADUC - I expect on the Security tab there are some accounts which are just the GUID - probably from deleted accounts. Remove them and then wait for replication to occur.

Simon.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
Comment Utility
"Corrupted" means Exchange cannot read it.
In most cases this isn't a problem with the mailbox, but the Active Directory account.
Look at the account in ADUC - I expect on the Security tab there are some accounts which are just the GUID - probably from deleted accounts. Remove them and then wait for replication to occur.

Simon.
0
 
LVL 1

Author Comment

by:Olevo
Comment Utility
Yes, you’re right… I can see few unknown account there. Before I’ll remove them from the security tab I would like to find out who was using those account before.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
Comment Utility
If you are seeing the Raw GUID then you will not be able to find out anything because they are now orphaned objects. Removing them is the only thing that you can do.

Simon.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now