asked on

Exchange 2013 Control panel displaying random pop up error ?

Today, when I tried to edit some Mailbox , Meeting Roomor even Distribution group AD attributes I always got this error message:

The object domain.com/Users/Factory Meeting Room 1 has been corrupted, and it's in an inconsistent state. The following validation errors happened:
________________________________________
The access control entry defines the ObjectType '9b099da6-0d3c-164c-8bee-5199d7165cbd' that can't be resolved.

Open in new window

how to get rid of that error message ?

note:
I have confirmed that repadmin /replsum and repadmin /showrepl both returns no error.

Any help would be greatly appreciated.

Vick Vega

What browser are you using and what's the CU level on the server?

Albert Widjaja

ASKER

I'm using IE and Chrome, both are the same.
As at the moment, it is on CU5.

Albert Widjaja

ASKER

I've found the steps in this article:

http://idmoim.blogspot.com/2015/10/warning-access-control-entry-defines.html

Open in new window

But when I execute:

Get-ACl "AD:\DC=MyDomain,DC=com" | Select Access -ExpandProperty Access | Where-Object {$_.ObjectType -eq "9b099da6-0d3c-164c-8bee-5199d7165cbd"} | Export-csv C:\Result-ACL.csv -NoTypeInformation

Open in new window

I got the very strange result in the IdentityReference column:
CREATOR OWNER and NT AUTHORITY\SELF

Here's the full result of the .CSV file:

ActiveDirectoryRights	InheritanceType	ObjectType	InheritedObjectType	ObjectFlags	AccessControlType	IdentityReference	IsInherited	InheritanceFlags	PropagationFlags
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	CREATOR OWNER	FALSE	ContainerInherit	InheritOnly
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	NT AUTHORITY\SELF	FALSE	ContainerInherit	InheritOnly

Open in new window

Any idea how to remove that safely from the whole 15000+ mailboxes ?

SOLUTION

Vick Vega

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Albert Widjaja

ASKER

Yes, I am now trying to install Exchange Server 2013 CU15 since it is the easiest no .NET Fx update required.

but it is still cumbersome due to many issues with multi-role IIS server :-|

Error:
The following error was generated when "$error.Clear(); Start-SetupProcess -Name "iisreset" -Args "/noforce /timeout:120"
" was run: "Microsoft.Exchange.Configuration.Tasks.TaskException: Process execution failed with exit code 1053.
at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
at Microsoft.Exchange.Management.Tasks.RunProcessBase.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

ASKER CERTIFIED SOLUTION

Vick Vega

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Albert Widjaja

ASKER

Thanks !