Event ID 2159 Warning

We are getting the following Event ID in the Event Viewer every few hours. The server it is referencing is still in production and is a Global Catalog server. Any assistance would be greatly appreciated.

Log Name:      Application
Source:        MSExchange ADAccess
Date:          3/13/2015 2:19:38 PM
Event ID:      2159
Task Category: Validation
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      Hermes.donald.com
Description:
Process edgetransport.exe () (PID=920). Configuration object CN=2003to2010,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=donald Mercury,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=donald,DC=com read from Titan.donald.com failed validation and will be excluded from the result set.  Set event logging level for Validation category to Expert to get additional events about each failure.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange ADAccess" />
    <EventID Qualifiers="32772">2159</EventID>
    <Level>3</Level>
    <Task>6</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-03-13T18:19:38.000Z" />
    <EventRecordID>288714</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Hermes.donald.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>edgetransport.exe ()</Data>
    <Data>920</Data>
    <Data>CN=2003to2010,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=donald Mercury,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=donald,DC=com</Data>
    <Data>Titan.donald.com</Data>
  </EventData>
</Event>
regsampAsked:
Who is Participating?
 
Network ZeroCloud Engineer Commented:
Try this:

Run ADSIEdit.msc or ldp.exe.

Expand or go to configuration then follow path of CN=configuration,DC=company,dc=com -> Services -> Microsoft Exchange -> organization -> Admin groups -> name of the group -> servers.

Right click on the server you want to delete and delete it. Choose carefully as you are directly in the AD database.
0
 
regsampAuthor Commented:
I tried that but the only server listed in there was the Exchange server itself and that is all.
0
 
HariomExchange ExpertsCommented:
Please refer following article which has same issue.

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26361120.html

A bit more rummaging around the net brought to this page...
http://adsearch-winzero.blogspot.com/2007/11/how-to-change-system-only-attributes.html 
which suggests adding a registry key...
Key: 'Allow System Only Change'
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
Data type: REG_DWORD
Value data: 1

which allowed me to makes the necessary changes in ADSIEdit.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
regsampAuthor Commented:
Okay, I will take a look at the link and then the reg change. I just don't know exactly what I am changing. The server it is talking about it is a current Domain Controller.
0
 
dan_blagutCommented:
Hello
Setting the Validation logging level to Maximum will identify the parameter that is invalid or out-of-range. What is the next log entry with Event ID 2161?

Dan
0
 
regsampAuthor Commented:
Okay, I will set the validation logging and check the parameter.
0
 
regsampAuthor Commented:
That seemed to have done it. The errors have cleared. Thank you.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.