Exchange 2013 Control panel displaying random pop up error ?

Today, when I tried to edit some Mailbox , Meeting Roomor even Distribution group AD attributes I always got this error message:

The object domain.com/Users/Factory Meeting Room 1 has been corrupted, and it's in an inconsistent state. The following validation errors happened:
________________________________________
The access control entry defines the ObjectType '9b099da6-0d3c-164c-8bee-5199d7165cbd' that can't be resolved.

Open in new window


how to get rid of that error message ?

note:
I have confirmed that repadmin /replsum and repadmin /showrepl both returns no error.

Any help would be greatly appreciated.
LVL 9
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?
 
RoninConnect With a Mentor Commented:
but it is still cumbersome due to many issues with multi-role IIS server :-|
I'm not sure if I follow, what multi-role ???

Have you updated the server with the latest Windows Updates?
Are you experiencing the same issue with pop-ups errors when trying to open the ECP from different machines?
0
 
RoninCommented:
What browser are you using and what's the CU level on the server?
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
I'm using IE and Chrome, both are the same.
As at the moment, it is on CU5.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Senior IT System EngineerIT ProfessionalAuthor Commented:
I've found the steps in this article:
http://idmoim.blogspot.com/2015/10/warning-access-control-entry-defines.html

Open in new window


But when I execute:
Get-ACl "AD:\DC=MyDomain,DC=com" | Select Access -ExpandProperty Access | Where-Object {$_.ObjectType -eq "9b099da6-0d3c-164c-8bee-5199d7165cbd"} | Export-csv C:\Result-ACL.csv -NoTypeInformation

Open in new window


I got the very strange result in the IdentityReference column:
CREATOR OWNER and NT AUTHORITY\SELF

Here's the full result of the .CSV file:
ActiveDirectoryRights	InheritanceType	ObjectType	InheritedObjectType	ObjectFlags	AccessControlType	IdentityReference	IsInherited	InheritanceFlags	PropagationFlags
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	CREATOR OWNER	FALSE	ContainerInherit	InheritOnly
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	NT AUTHORITY\SELF	FALSE	ContainerInherit	InheritOnly

Open in new window


Any idea how to remove that safely from the whole 15000+ mailboxes ?
0
 
RoninConnect With a Mentor Commented:
I suggest you upgrade the server with the latest CU, as first step.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Yes, I am now trying to install Exchange Server 2013 CU15 since it is the easiest no .NET Fx update required.

but it is still cumbersome due to many issues with multi-role IIS server :-|

Error:
The following error was generated when "$error.Clear(); Start-SetupProcess -Name "iisreset" -Args "/noforce /timeout:120"
" was run: "Microsoft.Exchange.Configuration.Tasks.TaskException: Process execution failed with exit code 1053.
   at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
   at Microsoft.Exchange.Management.Tasks.RunProcessBase.InternalProcessRecord()
   at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
   at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks  !
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.